3.10 SSL module deprecations

[tiran]

BPO	43880
Nosy	@tiran
PRs	#25455

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = 'https://github.com/tiran'
closed_at = <Date 2021-05-02.14:06:05.993>
created_at = <Date 2021-04-17.10:55:55.456>
labels = ['expert-SSL', 'type-feature', '3.10']
title = '3.10 SSL module deprecations'
updated_at = <Date 2021-05-02.14:06:05.992>
user = 'https://github.com/tiran'

bugs.python.org fields:

activity = <Date 2021-05-02.14:06:05.992>
actor = 'christian.heimes'
assignee = 'christian.heimes'
closed = True
closed_date = <Date 2021-05-02.14:06:05.993>
closer = 'christian.heimes'
components = ['SSL']
creation = <Date 2021-04-17.10:55:55.456>
creator = 'christian.heimes'
dependencies = []
files = []
hgrepos = []
issue_num = 43880
keywords = ['patch']
message_count = 5.0
messages = ['391284', '391289', '391365', '391389', '392698']
nosy_count = 1.0
nosy_names = ['christian.heimes']
pr_nums = ['25455']
priority = 'normal'
resolution = 'fixed'
stage = 'resolved'
status = 'closed'
superseder = None
type = 'enhancement'
url = 'https://bugs.python.org/issue43880'
versions = ['Python 3.10']

[tiran]

With PEP-644 accepted I can finally raise deprecation warnings for a lot of features that have been deprecated since Python 3.6 / 3.7 or by OpenSSL 1.1.1:

• ssl.OP_NO_SSLv2
• ssl.OP_NO_SSLv3
• ssl.OP_NO_TLSv1
• ssl.OP_NO_TLSv1_1
• ssl.OP_NO_TLSv1_2
• ssl.OP_NO_TLSv1_3
• ssl.PROTOCOL_SSLv2
• ssl.PROTOCOL_SSLv3
• ssl.PROTOCOL_SSLv23 (alias for PROTOCOL_TLS)
• ssl.PROTOCOL_TLS
• ssl.PROTOCOL_TLSv1
• ssl.PROTOCOL_TLSv1_1
• ssl.PROTOCOL_TLSv1_2
• ssl.TLSVersion.SSLv3
• ssl.TLSVersion.TLSv1
• ssl.TLSVersion.TLSv1_1
• ssl.wrap_socket()
• ssl.RAND_pseudo_bytes()
• ssl.RAND_egd() (already removed since it's not supported by OpenSSL 1.1.1)

[tiran]

• ssl.SSLContext() without a protocol argument
• ssl.match_hostname()

[tiran]

New changeset 2875c60 by Christian Heimes in branch 'master':
bpo-43880: Show DeprecationWarnings for deprecated ssl module features (GH-25455)
2875c60

[tiran]

I'm leaving the issue open as a reminder to improve whatsnew documentation.

[tiran]

I have updated whatsnew in #70003.