Skip to content

gh-89051: Add ssl.OP_LEGACY_SERVER_CONNECT #93927

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
hugovk merged 6 commits into from
Dec 20, 2022
Merged

gh-89051: Add ssl.OP_LEGACY_SERVER_CONNECT #93927

Changes from 1 commit
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
99125e8
Add ssl.OP_LEGACY_SERVER_CONNECT
graingert Jun 17, 2022
364d875
📜🤖 Added by blurb_it.
blurb-it[bot] Jun 17, 2022
aed16b1
Merge branch 'main' into op-legacy-server-connect
graingert Jul 6, 2022
580bca2
Merge branch 'main' into op-legacy-server-connect
graingert Jul 21, 2022
e5bd80a
Merge branch 'main' into op-legacy-server-connect
tiran Aug 3, 2022
b7d3f5c
Merge branch 'main' into op-legacy-server-connect
hugovk Dec 20, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Merge branch 'main' into op-legacy-server-connect
  • Loading branch information
@hugovk
hugovk authored Dec 20, 2022
commit b7d3f5c1bd517459c704f617ecfeb2367492d4c9
16 changes: 16 additions & 0 deletions Doc/library/ssl.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -807,6 +807,22 @@ Constants

.. versionadded:: 3.10

.. data:: OP_ENABLE_KTLS

Enable the use of the kernel TLS. To benefit from the feature, OpenSSL must
have been compiled with support for it, and the negotiated cipher suites and
extensions must be supported by it (a list of supported ones may vary by
platform and kernel version).

Note that with enabled kernel TLS some cryptographic operations are
performed by the kernel directly and not via any available OpenSSL
Providers. This might be undesirable if, for example, the application
requires all cryptographic operations to be performed by the FIPS provider.

This option is only available with OpenSSL 3.0.0 and later.

.. versionadded:: 3.12

.. data:: OP_LEGACY_SERVER_CONNECT

Allow legacy insecure renegotiation between OpenSSL and unpatched servers
Expand Down
You are viewing a condensed version of this merge commit. You can view the full changes here.