Prefer PROTOCOL_TLS_CLIENT/SERVER

[tiran]

BPO	31346
Nosy	@tiran
PRs	bpo-31346: Use PROTOCOL_TLS_CLIENT/SERVER #3058

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = 'https://github.com/tiran'
closed_at = <Date 2017-09-17.14:35:33.296>
created_at = <Date 2017-09-04.23:20:29.353>
labels = ['expert-SSL', 'type-feature', '3.7']
title = 'Prefer PROTOCOL_TLS_CLIENT/SERVER'
updated_at = <Date 2017-09-17.14:35:33.295>
user = 'https://github.com/tiran'

bugs.python.org fields:

activity = <Date 2017-09-17.14:35:33.295>
actor = 'christian.heimes'
assignee = 'christian.heimes'
closed = True
closed_date = <Date 2017-09-17.14:35:33.296>
closer = 'christian.heimes'
components = ['SSL']
creation = <Date 2017-09-04.23:20:29.353>
creator = 'christian.heimes'
dependencies = []
files = []
hgrepos = []
issue_num = 31346
keywords = []
message_count = 2.0
messages = ['301282', '302287']
nosy_count = 1.0
nosy_names = ['christian.heimes']
pr_nums = ['3058']
priority = 'normal'
resolution = 'fixed'
stage = 'resolved'
status = 'closed'
superseder = None
type = 'enhancement'
url = 'https://bugs.python.org/issue31346'
versions = ['Python 3.7']

[tiran]

Since Python 3.6 the ssl module has three new protocols:

• PROTOCOL_TLS is the new, preferred, and less confusing name of PROTOCOL_SSLv23. It performs auto-negotiation of the best TLS/SSL protocol supported by client and server.
• PROTOCOL_TLS_CLIENT is a client-only variant of PROTOCOL_TLS. The protocol also enables check_hostname and CERT_REQUIRED.
• PROTOCOL_TLS_SERVER is server side-only variant. It leaves check_hostname disabled and has CERT_NONE (no client cert validation).

Tests and code should prefer PROTOCOL_TLS_CLIENT and PROTOCOL_TLS_SERVER whenever possible.

[tiran]

New changeset a170fa1 by Christian Heimes in branch 'master':
bpo-31346: Use PROTOCOL_TLS_CLIENT/SERVER (bpo-3058)
a170fa1