diff options
| author | Benjamin Peterson <benjamin@python.org> | 2015-04-08 15:11:00 (GMT) |
|---|---|---|
| committer | Benjamin Peterson <benjamin@python.org> | 2015-04-08 15:11:00 (GMT) |
| commit | ce29e87e6fc64269392c807a33e268ca2358c3b3 (patch) | |
| tree | d9ab7bcef9a96c3e23252b293730d5bdd4c09a26 /Doc | |
| parent | c7d957fe4a7a4ad4d6ee9d337b2d323447bbd1aa (diff) | |
| download | cpython-ce29e87e6fc64269392c807a33e268ca2358c3b3.zip cpython-ce29e87e6fc64269392c807a33e268ca2358c3b3.tar.gz cpython-ce29e87e6fc64269392c807a33e268ca2358c3b3.tar.bz2 | |
actually ssl3 is just completely broken
Diffstat (limited to 'Doc')
| -rw-r--r-- | Doc/library/ssl.rst | 14 |
1 files changed, 7 insertions, 7 deletions
diff --git a/Doc/library/ssl.rst b/Doc/library/ssl.rst index 69086d2..04ec41b 100644 --- a/Doc/library/ssl.rst +++ b/Doc/library/ssl.rst @@ -263,13 +263,13 @@ purposes. .. note:: If you find that when certain older clients or servers attempt to connect - with a :class:`SSLContext` created by this function that they get an - error stating "Protocol or cipher suite mismatch", it may be that they - only support SSL3.0 which this function excludes using the - :data:`OP_NO_SSLv3`. SSL3.0 has problematic security due to a number of - poor implementations and it's reliance on MD5 within the protocol. If you - wish to continue to use this function but still allow SSL 3.0 connections - you can re-enable them using:: + with a :class:`SSLContext` created by this function that they get an error + stating "Protocol or cipher suite mismatch", it may be that they only + support SSL3.0 which this function excludes using the + :data:`OP_NO_SSLv3`. SSL3.0 is widely considered to be `completely broken + <https://en.wikipedia.org/wiki/POODLE>`_. If you still wish to continue to + use this function but still allow SSL 3.0 connections you can re-enable + them using:: ctx = ssl.create_default_context(Purpose.CLIENT_AUTH) ctx.options &= ~ssl.OP_NO_SSLv3 |