diff options
| author | Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com> | 2018-06-11 23:20:24 (GMT) |
|---|---|---|
| committer | Ned Deily <nad@python.org> | 2018-06-11 23:20:24 (GMT) |
| commit | a5db479ac4cdcc0d94ec1d7a594720a651d90433 (patch) | |
| tree | 4af8b660b61ba0de58f5fbdda00f16b96aa498d2 /Lib/email/errors.py | |
| parent | 6530577e29a9679c7e4c7ba7adf1c02393d2ad13 (diff) | |
| download | cpython-a5db479ac4cdcc0d94ec1d7a594720a651d90433.zip cpython-a5db479ac4cdcc0d94ec1d7a594720a651d90433.tar.gz cpython-a5db479ac4cdcc0d94ec1d7a594720a651d90433.tar.bz2 | |
bpo-31432: Clarify ssl CERT_NONE/OPTIONAL/REQUIRED docs. (GH-3530) (GH-7649)
The documentation for CERT_NONE, CERT_OPTIONAL, and CERT_REQUIRED were
misleading and partly wrong. It fails to explain that OpenSSL behaves
differently in client and server mode. Also OpenSSL does validate the
cert chain everytime. With SSL_VERIFY_NONE a validation error is not
fatal in client mode and does not request a client cert in server mode.
Also discourage people from using CERT_OPTIONAL in client mode.
(cherry picked from commit ef24b6c54d40e7820456873a6eab6ef57d2bd0db)
Co-authored-by: Christian Heimes <christian@python.org>
Diffstat (limited to 'Lib/email/errors.py')
0 files changed, 0 insertions, 0 deletions