diff options
| author | Christian Heimes <christian@python.org> | 2018-02-24 21:12:40 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2018-02-24 21:12:40 (GMT) |
| commit | 6cdb7954b0a578d899e4b78b868ea59eef08480a (patch) | |
| tree | 8e84ffb724490814d5d01858162bfde792646f59 /Doc | |
| parent | 141c5e8c2437a9fed95a04c81e400ef725592a17 (diff) | |
| download | cpython-6cdb7954b0a578d899e4b78b868ea59eef08480a.zip cpython-6cdb7954b0a578d899e4b78b868ea59eef08480a.tar.gz cpython-6cdb7954b0a578d899e4b78b868ea59eef08480a.tar.bz2 | |
bpo-30622: Improve NPN support detection (#5859)
The ssl module now detects missing NPN support in LibreSSL.
Co-Authored-By: Bernard Spil <brnrd@FreeBSD.org>
Signed-off-by: Christian Heimes <christian@python.org>
Diffstat (limited to 'Doc')
| -rw-r--r-- | Doc/library/ssl.rst | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/Doc/library/ssl.rst b/Doc/library/ssl.rst index 4cad9f6..7371024 100644 --- a/Doc/library/ssl.rst +++ b/Doc/library/ssl.rst @@ -2434,6 +2434,23 @@ successful call of :func:`~ssl.RAND_add`, :func:`~ssl.RAND_bytes` or :func:`~ssl.RAND_pseudo_bytes` is sufficient. +.. ssl-libressl: + +LibreSSL support +---------------- + +LibreSSL is a fork of OpenSSL 1.0.1. The ssl module has limited support for +LibreSSL. Some features are not available when the ssl module is compiled +with LibreSSL. + +* LibreSSL >= 2.6.1 no longer supports NPN. The methods + :meth:`SSLContext.set_npn_protocols` and + :meth:`SSLSocket.selected_npn_protocol` are not available. +* :meth:`SSLContext.set_default_verify_paths` ignores the env vars + :envvar:`SSL_CERT_FILE` and :envvar:`SSL_CERT_PATH` although + :func:`get_default_verify_paths` still reports them. + + .. seealso:: Class :class:`socket.socket` |