Why using 'commonName' is disabled?

[DiskoRico]

I am using "old" self signed certificates that does not include subjectAltName.
I don't want to generate new ones.

1. Why this behavior is disabled in first place?
2. Is there a possibility to add an option to override context.hostname_checks_common_name?
   

   httpx/httpx/_config.py

   Lines 139 to 144 in 7e10342

   	# Disable using 'commonName' for SSLContext.check_hostname
   	# when the 'subjectAltName' extension isn't available.
   	try:
   	context.hostname_checks_common_name = False
   	except AttributeError: # pragma: no cover
   	pass

Thanks!

[DiskoRico]

I eventually used create_ssl_context from _config to create ssl context and change hostname_checks_common_name to True.
After that I have passed the context to my call and it worked fine 😄

[tomchristie]

This'll be more obvious once we get this in... #3022

[DiskoRico]

Thanks for the fast response 😄