diff options
author | Christian Heimes <christian@python.org> | 2018-06-11 22:59:45 (GMT) |
---|---|---|
committer | Ned Deily <nad@python.org> | 2018-06-11 22:59:45 (GMT) |
commit | ef24b6c54d40e7820456873a6eab6ef57d2bd0db (patch) | |
tree | 453f2603e01d16c2be2e5b280e0fc70c6061bbb5 /Python/Python-ast.c | |
parent | 4b704f29f5a0b6f6d7bd67468ed004bd3a96855d (diff) | |
download | cpython-ef24b6c54d40e7820456873a6eab6ef57d2bd0db.zip cpython-ef24b6c54d40e7820456873a6eab6ef57d2bd0db.tar.gz cpython-ef24b6c54d40e7820456873a6eab6ef57d2bd0db.tar.bz2 |
bpo-31432: Clarify ssl CERT_NONE/OPTIONAL/REQUIRED docs. (GH-3530)
The documentation for CERT_NONE, CERT_OPTIONAL, and CERT_REQUIRED were
misleading and partly wrong. It fails to explain that OpenSSL behaves
differently in client and server mode. Also OpenSSL does validate the
cert chain everytime. With SSL_VERIFY_NONE a validation error is not
fatal in client mode and does not request a client cert in server mode.
Also discourage people from using CERT_OPTIONAL in client mode.
Diffstat (limited to 'Python/Python-ast.c')
0 files changed, 0 insertions, 0 deletions