Skip to content

Latest commit

 

History

History
7 lines (7 loc) · 470 Bytes

2022-06-24-10-39-56.gh-issue-94199.MIuckY.rst

File metadata and controls

7 lines (7 loc) · 470 Bytes

Remove the :func:`ssl.wrap_socket` function, deprecated in Python 3.7: instead, create a :class:`ssl.SSLContext` object and call its :class:`ssl.SSLContext.wrap_socket` method. Any package that still uses :func:`ssl.wrap_socket` is broken and insecure. The function neither sends a SNI TLS extension nor validates server hostname. Code is subject to CWE-295: Improper Certificate Validation. Patch by Victor Stinner.