diff options
author | Christian Heimes <christian@python.org> | 2018-06-12 00:59:45 +0200 |
---|---|---|
committer | Ned Deily <nad@python.org> | 2018-06-11 18:59:45 -0400 |
commit | ef24b6c54d40e7820456873a6eab6ef57d2bd0db (patch) | |
tree | 453f2603e01d16c2be2e5b280e0fc70c6061bbb5 /Python/Python-ast.c | |
parent | 4b704f29f5a0b6f6d7bd67468ed004bd3a96855d (diff) | |
download | cpython-git-ef24b6c54d40e7820456873a6eab6ef57d2bd0db.tar.gz |
bpo-31432: Clarify ssl CERT_NONE/OPTIONAL/REQUIRED docs. (GH-3530)
The documentation for CERT_NONE, CERT_OPTIONAL, and CERT_REQUIRED were
misleading and partly wrong. It fails to explain that OpenSSL behaves
differently in client and server mode. Also OpenSSL does validate the
cert chain everytime. With SSL_VERIFY_NONE a validation error is not
fatal in client mode and does not request a client cert in server mode.
Also discourage people from using CERT_OPTIONAL in client mode.
Diffstat (limited to 'Python/Python-ast.c')
0 files changed, 0 insertions, 0 deletions