Issue2481

Current lib-python/2.7/urllib2.py is out-dated. As a result, I can't disable SSL certificate verification in pure Python:

import ssl
import urllib2

context = ssl.create_default_context(ssl.Purpose.SERVER_AUTH)
context.check_hostname = False
context.verify_mode = ssl.CERT_NONE
req = urllib2.urlopen('https://wrong.host.badssl.com/', context=context)
print(req.read())

Please update it.

Looks like a blocker to the RC to me

We need to do this update. It looks pretty straightforward. We should also update urllib, along with the corresponding tests test_httplib, test_urllib, test_urllib2 from CPython 2.7 latest, including the recent HTTPoxy fix (highly unlikely to be a problem in Jython however, given how bad CGI performance would be if someone did set that up). There are some minor failures in test_httplib that can be readily skipped or possibly resolved.

I'm close to getting this update in - just need to fix a couple more tests that we will defer until 2.7.2 (or possibly later).

Fixed as of https://hg.python.org/jython/rev/91083509a11c

Thanks it's fixed!