Skip to content

Fixed Python 3.13 transforms failing behind the test proxy - #296

Merged
ikraamg merged 1 commit into
mainfrom
python-313-proxy-certificate
Oct 17, 2026
Merged

ikraamg merged 1 commit into
mainfrom
python-313-proxy-certificate

Conversation

@ikraamg

@ikraamg ikraamg commented Oct 17, 2026

Copy link
Copy Markdown
Contributor
  • Python 3.13 rejects a certificate chain without key identifiers ("Missing Authority Key Identifier"), so every HTTPS request a Python transform made under trmnlp test failed and the screens showed its error path. The Docker image ships 3.13.
  • The test certificate authority now writes a subject key identifier on every certificate and an authority key identifier on every leaf.

🤖 Generated with Claude Code

Python 3.13 verifies certificates with X509_STRICT, which rejects a chain
without key identifiers ("Missing Authority Key Identifier"). Every HTTPS
request a Python transform made under `trmnlp test` failed, so the transform
fell back to its error path and the screens showed missing data. Python 3.12
and the other runtimes do not check, which hid it on most machines; the
Docker image ships 3.13.

The authority now writes a subject key identifier on every certificate and
an authority key identifier on every leaf.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@ikraamg
ikraamg force-pushed the python-313-proxy-certificate branch from 95187b5 to b935378 Compare October 17, 2026 09:36
@ikraamg
ikraamg merged commit 5d5a56f into main Oct 17, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant