Fix for CVE-2022-37460 - Removed "shell=True", made args a list, and revised to handle stdin in function

[calebshortt]

Fixes a vulnerability (CVE-2022-37460) in the get-remote-certificate script that would allow for remote code execution given malicious host parameter.

NOTE: Issue reported to python security but no gh-#####.

[bedevere-bot]

Most changes to Python require a NEWS entry.

Please add it using the blurb_it web app or the blurb command-line tool.

[ghost]

All commit authors signed the Contributor License Agreement.

[gpshead]

Please file an issue in this github repo related to this. adjust the PR title to refer to the gh-#####: issue number. PRs are already public. There is no reason not to file an issue once a PR exists.

(and no need to refer to the CVE as that is being withdrawn)

[vstinner]

This change breaks the script. I'm not sure if you tested manually the script with your change.

To remove shell=True, you have to to split manually the r'openssl x509 (...)' shell command.

Anyway, I wrote PR #97613 which works and has a NEWS entry. I credited you in my PR.

[bedevere-bot]

A Python core developer has requested some changes be made to your pull request before we can consider merging it. If you could please address their requests along with any other requests in other reviews from core developers that would be appreciated.

Once you have made the requested changes, please leave a comment on this pull request containing the phrase I have made the requested changes; please review again. I will then notify any core developers who have left a review that you're ready for them to take another look at this pull request.

[kumaraditya303]

Superseded by #97613. Thanks for the PR!