traverseda
/
cpython
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Issue #9983: warn that urllib and httplib don't perform SSL certificate validation.

This commit is contained in:
Antoine Pitrou 2010-09-29 11:24:21 +00:00
parent c3ed2e7f83
commit 79ecd7621e
2 changed files with 10 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
Doc/library/http.client.rst
View File

@ -53,13 +53,13 @@ The module provides the following classes:
.. class:: HTTPSConnection(host, port=None, key_file=None, cert_file=None, strict=None[, timeout[, source_address]])
A subclass of :class:`HTTPConnection` that uses SSL for communication with
secure servers. Default port is ``443``. *key_file* is the name of a PEM
formatted file that contains your private key. *cert_file* is a PEM formatted
certificate chain file.
secure servers. Default port is ``443``. *key_file* is the name of a PEM
formatted file that contains your private key, and *cert_file* is a PEM
formatted certificate chain file; both can be used for authenticating
yourself against the server.
.. note::
This does not do any certificate verification.
.. warning::
This does not do any verification of the server's certificate.
.. versionchanged:: 3.2
*source_address* was added.

4
Doc/library/urllib.request.rst
View File

@ -11,6 +11,10 @@ The :mod:`urllib.request` module defines functions and classes which help in
opening URLs (mostly HTTP) in a complex world --- basic and digest
authentication, redirections, cookies and more.
.. warning:: When opening HTTPS (or FTPS) URLs, it is not attempted to
validate the server certificate. Use at your own risk!
The :mod:`urllib.request` module defines the following functions: