summaryrefslogtreecommitdiffstats
path: root/Doc/library
diff options
context:
space:
mode:
authorBenjamin Peterson <benjamin@python.org>2014-11-23 23:06:39 (GMT)
committerBenjamin Peterson <benjamin@python.org>2014-11-23 23:06:39 (GMT)
commitf9284ae8ede5b8977248a4259eee0cd81a100c16 (patch)
treeb3430fd55e6b76ee01dfd6ac4a0baa52de7b7a3a /Doc/library
parentf1a3240ba86408a2cdb88a2bfa38a2dce1f4ed9c (diff)
parent7243b574e5fc6f9ae68dc5ebd8252047b8e78e3b (diff)
downloadcpython-f9284ae8ede5b8977248a4259eee0cd81a100c16.zip
cpython-f9284ae8ede5b8977248a4259eee0cd81a100c16.tar.gz
cpython-f9284ae8ede5b8977248a4259eee0cd81a100c16.tar.bz2
merge 3.4 (#22921)
Diffstat (limited to 'Doc/library')
-rw-r--r--Doc/library/ssl.rst14
1 files changed, 7 insertions, 7 deletions
diff --git a/Doc/library/ssl.rst b/Doc/library/ssl.rst
index 6599f88..3015664 100644
--- a/Doc/library/ssl.rst
+++ b/Doc/library/ssl.rst
@@ -680,8 +680,7 @@ Constants
.. data:: HAS_SNI
Whether the OpenSSL library has built-in support for the *Server Name
- Indication* extension (as defined in :rfc:`4366`). When true, you can
- use the *server_hostname* argument to :meth:`SSLContext.wrap_socket`.
+ Indication* extension (as defined in :rfc:`4366`).
.. versionadded:: 3.2
@@ -1259,11 +1258,12 @@ to speed up repeated connections from the same clients.
On client connections, the optional parameter *server_hostname* specifies
the hostname of the service which we are connecting to. This allows a
single server to host multiple SSL-based services with distinct certificates,
- quite similarly to HTTP virtual hosts. Specifying *server_hostname*
- will raise a :exc:`ValueError` if the OpenSSL library doesn't have support
- for it (that is, if :data:`HAS_SNI` is :const:`False`). Specifying
- *server_hostname* will also raise a :exc:`ValueError` if *server_side*
- is true.
+ quite similarly to HTTP virtual hosts. Specifying *server_hostname* will
+ raise a :exc:`ValueError` if *server_side* is true.
+
+ .. versionchanged:: 3.5
+ Always allow a server_hostname to be passed, even if OpenSSL does not
+ have SNI.
.. method:: SSLContext.wrap_bio(incoming, outgoing, server_side=False, \
server_hostname=None)