diff options
| author | Christian Heimes <christian@python.org> | 2018-05-15 20:25:40 (GMT) |
|---|---|---|
| committer | Ned Deily <nad@python.org> | 2018-05-15 20:25:40 (GMT) |
| commit | 67c48016638aac9a15afe6fd6754d53d2bdd6b76 (patch) | |
| tree | 0865baa109afe92af0728aa78b5d801c249922dc /Doc/library | |
| parent | 19177fbd5d6d9b29ccc302d65f9d9417ece082ce (diff) | |
| download | cpython-67c48016638aac9a15afe6fd6754d53d2bdd6b76.zip cpython-67c48016638aac9a15afe6fd6754d53d2bdd6b76.tar.gz cpython-67c48016638aac9a15afe6fd6754d53d2bdd6b76.tar.bz2 | |
bpo-32257: Add ssl.OP_NO_RENEGOTIATION (GH-5904)
The ssl module now contains OP_NO_RENEGOTIATION constant, available with
OpenSSL 1.1.0h or 1.1.1.
Note, OpenSSL 1.1.0h hasn't been released yet.
Signed-off-by: Christian Heimes <christian@python.org>
Diffstat (limited to 'Doc/library')
| -rw-r--r-- | Doc/library/ssl.rst | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/Doc/library/ssl.rst b/Doc/library/ssl.rst index f965494..dcb2666 100644 --- a/Doc/library/ssl.rst +++ b/Doc/library/ssl.rst @@ -803,6 +803,15 @@ Constants The option is deprecated since OpenSSL 1.1.0. It was added to 2.7.15, 3.6.3 and 3.7.0 for backwards compatibility with OpenSSL 1.0.2. +.. data:: OP_NO_RENEGOTIATION + + Disable all renegotiation in TLSv1.2 and earlier. Do not send + HelloRequest messages, and ignore renegotiation requests via ClientHello. + + This option is only available with OpenSSL 1.1.0h and later. + + .. versionadded:: 3.7 + .. data:: OP_CIPHER_SERVER_PREFERENCE Use the server's cipher ordering preference, rather than the client's. |