Make http.server support SSL

[remilapeyre]

BPO	40990
Nosy	@remilapeyre
PRs	bpo-40990: Add HTTPS support to http.server.HTTPServer #20923

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = None
closed_at = None
created_at = <Date 2020-06-16.12:51:47.004>
labels = ['type-bug', 'library', '3.10']
title = 'Make http.server support SSL'
updated_at = <Date 2021-10-27.11:31:35.995>
user = 'https://github.com/remilapeyre'

bugs.python.org fields:

activity = <Date 2021-10-27.11:31:35.995>
actor = 'Fred'
assignee = 'none'
closed = False
closed_date = None
closer = None
components = ['Library (Lib)']
creation = <Date 2020-06-16.12:51:47.004>
creator = 'remi.lapeyre'
dependencies = []
files = []
hgrepos = []
issue_num = 40990
keywords = ['patch']
message_count = 3.0
messages = ['371647', '394021', '405087']
nosy_count = 2.0
nosy_names = ['remi.lapeyre', 'Fred']
pr_nums = ['20923']
priority = 'normal'
resolution = None
stage = 'patch review'
status = 'open'
superseder = None
type = 'behavior'
url = 'https://bugs.python.org/issue40990'
versions = ['Python 3.10']

Linked PRs

• gh-85162: Add HTTPSServer to http.server  #129607

[remilapeyre]

It's a bit outside of its original scope but with more and more application requiring HTTPS it is sometime needed even when doing some simple tests or local development.

It's quite easy to have an SSL certificate, either auto-signed or using Let's Encrypt but configuring Nginx or HAProxy just to serve a local directory on localhost is tedious.

I think just wrapping the socket in SSLSocket and adding two flags on the command line would be enough?

[Fred]

It could look for a existing certificate in a well-known location, and could fallback to an self-signed certificate that could be shipped with Python.

[Fred]

How is this going? Any progress?

[kaisxu]

Just check, how is the progress?