Skip to content

Prefer PROTOCOL_TLS_CLIENT/SERVER #75527

Closed

Description

@tiran
BPO 31346
Nosy @tiran
PRs
  • bpo-31346: Use PROTOCOL_TLS_CLIENT/SERVER #3058
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = 'https://github.com/tiran'
    closed_at = <Date 2017-09-17.14:35:33.296>
    created_at = <Date 2017-09-04.23:20:29.353>
    labels = ['expert-SSL', 'type-feature', '3.7']
    title = 'Prefer PROTOCOL_TLS_CLIENT/SERVER'
    updated_at = <Date 2017-09-17.14:35:33.295>
    user = 'https://github.com/tiran'

    bugs.python.org fields:

    activity = <Date 2017-09-17.14:35:33.295>
    actor = 'christian.heimes'
    assignee = 'christian.heimes'
    closed = True
    closed_date = <Date 2017-09-17.14:35:33.296>
    closer = 'christian.heimes'
    components = ['SSL']
    creation = <Date 2017-09-04.23:20:29.353>
    creator = 'christian.heimes'
    dependencies = []
    files = []
    hgrepos = []
    issue_num = 31346
    keywords = []
    message_count = 2.0
    messages = ['301282', '302287']
    nosy_count = 1.0
    nosy_names = ['christian.heimes']
    pr_nums = ['3058']
    priority = 'normal'
    resolution = 'fixed'
    stage = 'resolved'
    status = 'closed'
    superseder = None
    type = 'enhancement'
    url = 'https://bugs.python.org/issue31346'
    versions = ['Python 3.7']

    Activity

    1. tiran commented on Sep 4, 2017

      @tiran
      MemberAuthor

      Since Python 3.6 the ssl module has three new protocols:

      • PROTOCOL_TLS is the new, preferred, and less confusing name of PROTOCOL_SSLv23. It performs auto-negotiation of the best TLS/SSL protocol supported by client and server.
      • PROTOCOL_TLS_CLIENT is a client-only variant of PROTOCOL_TLS. The protocol also enables check_hostname and CERT_REQUIRED.
      • PROTOCOL_TLS_SERVER is server side-only variant. It leaves check_hostname disabled and has CERT_NONE (no client cert validation).

      Tests and code should prefer PROTOCOL_TLS_CLIENT and PROTOCOL_TLS_SERVER whenever possible.

    2. self-assigned this
      on Sep 4, 2017
    3. tiran commented on Sep 15, 2017

      @tiran
      MemberAuthor

      New changeset a170fa1 by Christian Heimes in branch 'master':
      bpo-31346: Use PROTOCOL_TLS_CLIENT/SERVER (bpo-3058)
      a170fa1

    4. transferred this issue fromon Apr 10, 2022
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Metadata

    Metadata

    Assignees

    Labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions