diff options
| author | Ned Deily <nad@python.org> | 2018-06-12 01:44:58 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2018-06-12 01:44:58 (GMT) |
| commit | e25757408dc22561af9f9589c2c7e2a2fbb66ee4 (patch) | |
| tree | d7e58993726733ba646f16b997b81ddb88f4480f /Python/ceval.c | |
| parent | 2023eafd9a0554823cab5adf5a1b116d7984db98 (diff) | |
| download | cpython-e25757408dc22561af9f9589c2c7e2a2fbb66ee4.zip cpython-e25757408dc22561af9f9589c2c7e2a2fbb66ee4.tar.gz cpython-e25757408dc22561af9f9589c2c7e2a2fbb66ee4.tar.bz2 | |
bpo-31432: Clarify ssl CERT_NONE/OPTIONAL/REQUIRED docs. (GH-3530) (GH-7652)
The documentation for CERT_NONE, CERT_OPTIONAL, and CERT_REQUIRED were
misleading and partly wrong. It fails to explain that OpenSSL behaves
differently in client and server mode. Also OpenSSL does validate the
cert chain everytime. With SSL_VERIFY_NONE a validation error is not
fatal in client mode and does not request a client cert in server mode.
Also discourage people from using CERT_OPTIONAL in client mode.
Diffstat (limited to 'Python/ceval.c')
0 files changed, 0 insertions, 0 deletions