Alex Gaynor
e98205d798
Issue #20421 : Add a .version() method to SSL sockets exposing the actual protocol version in use.
...
Backport from default.
2014-09-04 13:33:22 -07:00
Benjamin Peterson
daeb925cc8
backport many ssl features from Python 3 ( closes #21308 )
...
A contribution of Alex Gaynor and David Reid with the generous support of
Rackspace. May God have mercy on their souls.
2014-08-20 14:14:50 -05:00
Donald Stufft
74a4ebaed0
Issue #21043 - Remove CACert.org from the recommendations
2014-03-24 19:49:42 -04:00
Antoine Pitrou
63cc99d9a6
Issue #19422 : Explicitly disallow non-SOCK_STREAM sockets in the ssl module, rather than silently let them emit clear text data.
2013-12-28 17:26:33 +01:00
Serhiy Storchaka
26d936a71e
Issue #19795 : Improved markup of True/False constants.
2013-11-29 12:16:53 +02:00
Antoine Pitrou
f7a52475a5
Issue #19508 : warn that ssl doesn't validate certificates by default
2013-11-17 15:42:58 +01:00
Christian Heimes
db78e4365b
fix language
2013-10-29 22:19:39 +01:00
Christian Heimes
88b2220859
Issue #18747 : document issue with OpenSSL's CPRNG state and fork
2013-10-29 21:08:56 +01:00
Georg Brandl
4e8534e2ae
Closes #19177 : replace dead link to SSL/TLS introduction with the version from Apache.
2013-10-06 18:20:31 +02:00
Antoine Pitrou
f12f3916aa
Issue #17739 : fix the description of SSLSocket.getpeercert(binary_form=True) for server sockets.
...
Thanks to David D Lowe for reporting.
2013-04-16 20:27:17 +02:00
Giampaolo Rodola'
76794131de
#17641 : 2.X / 3.X ssl doc unification
2013-04-06 03:46:47 +02:00
Andrew Svetlov
1625d88709
Issue #16341 : convert examples to use except ... as ... syntax.
2012-10-30 21:56:43 +02:00
Antoine Pitrou
df4c986f9e
Issue #13747 : fix SSL compatibility table.
2012-01-09 21:43:18 +01:00
Antoine Pitrou
4a7e0c896c
Issue #13747 : fix documentation error about the default SSL version.
2012-01-09 21:35:11 +01:00
Antoine Pitrou
5472c1c004
Issue #12823 : remove broken link and replace it with another resource.
2011-10-07 17:03:01 +02:00
Éric Araujo
29a0b57e4e
Backport source links from 3.x.
...
Existing links have been updated to use the new reST role. In some
files, I have also made cosmetic changes to the header.
2011-08-19 02:14:03 +02:00
Victor Stinner
b1241f9619
(Merge 3.1) Issue #12012 : ssl.PROTOCOL_SSLv2 becomes optional
...
OpenSSL is now compiled with OPENSSL_NO_SSL2 defined (without the SSLv2
protocol) on Debian: fix the ssl module on Debian Testing and Debian Sid.
Optimize also ssl.get_protocol_name(): speed does matter!
2011-05-10 01:52:03 +02:00
Georg Brandl
280460271d
Merged revisions 87627,87638,87760,87986,88108,88115,88165,88263,88329,88364-88365,88423-88424 via svnmerge from
...
svn+ssh://pythondev@svn.python.org/python/branches/py3k
........
r87627 | georg.brandl | 2011-01-02 15:23:43 +0100 (So, 02 Jan 2011) | 1 line
#1665333 : add more docs for optparse.OptionGroup.
........
r87638 | georg.brandl | 2011-01-02 20:07:51 +0100 (So, 02 Jan 2011) | 1 line
Fix code indentation.
........
r87760 | georg.brandl | 2011-01-05 11:59:48 +0100 (Mi, 05 Jan 2011) | 1 line
Fix duplicate end tag.
........
r87986 | georg.brandl | 2011-01-13 08:31:18 +0100 (Do, 13 Jan 2011) | 1 line
Fix the example output of count().
........
r88108 | georg.brandl | 2011-01-19 09:42:03 +0100 (Mi, 19 Jan 2011) | 1 line
Suppress trailing spaces in table paragraphs.
........
r88115 | georg.brandl | 2011-01-19 21:05:49 +0100 (Mi, 19 Jan 2011) | 1 line
#10944 : add c_bool to types table.
........
r88165 | georg.brandl | 2011-01-24 20:53:18 +0100 (Mo, 24 Jan 2011) | 1 line
Typo fix.
........
r88263 | georg.brandl | 2011-01-30 13:19:35 +0100 (So, 30 Jan 2011) | 1 line
#10680 : fix mutually exclusive arguments in argument groups.
........
r88329 | georg.brandl | 2011-02-03 08:08:25 +0100 (Do, 03 Feb 2011) | 1 line
Punctuation typos.
........
r88364 | georg.brandl | 2011-02-07 13:10:46 +0100 (Mo, 07 Feb 2011) | 1 line
#11138 : fix order of fill and align specifiers.
........
r88365 | georg.brandl | 2011-02-07 13:13:58 +0100 (Mo, 07 Feb 2011) | 1 line
#8691 : document that right alignment is default for numbers.
........
r88423 | georg.brandl | 2011-02-15 13:41:17 +0100 (Di, 15 Feb 2011) | 1 line
Apply logging SocketHandler doc update by Vinay.
........
r88424 | georg.brandl | 2011-02-15 13:44:43 +0100 (Di, 15 Feb 2011) | 1 line
Remove editing slip.
........
2011-02-25 11:01:04 +00:00
Antoine Pitrou
9e7d6e598c
Merged revisions 87653-87655 via svnmerge from
...
svn+ssh://pythondev@svn.python.org/python/branches/py3k
........
r87653 | antoine.pitrou | 2011-01-02 23:06:53 +0100 (dim., 02 janv. 2011) | 3 lines
Clarify behaviour of close() and shutdown() on sockets.
........
r87654 | antoine.pitrou | 2011-01-02 23:09:27 +0100 (dim., 02 janv. 2011) | 3 lines
Add a shutdown() call in the server example.
........
r87655 | antoine.pitrou | 2011-01-02 23:12:22 +0100 (dim., 02 janv. 2011) | 3 lines
Some nits.
........
2011-01-02 22:39:10 +00:00
Antoine Pitrou
308c2af9a4
Document that SSL v2 is insecure.
2010-05-16 14:16:56 +00:00
Andrew M. Kuchling
3ded421fd5
Reword paragraph to make its meaning clearer.
...
Antoine Pitrou: is my version of the paragraph still correct?
R. David Murray: is this more understandable than the previous version?
2010-04-30 00:52:31 +00:00
Antoine Pitrou
0a6373c1a9
Issue #8322 : Add a *ciphers* argument to SSL sockets, so as to change the
...
available cipher list. Helps fix test_ssl with OpenSSL 1.0.0.
2010-04-17 17:10:38 +00:00
Antoine Pitrou
f9de534c21
Issue #8321 : Give access to OpenSSL version numbers from the `ssl` module,
...
using the new attributes `ssl.OPENSSL_VERSION`, `ssl.OPENSSL_VERSION_INFO`
and `ssl.OPENSSL_VERSION_NUMBER`.
2010-04-05 21:35:07 +00:00
Georg Brandl
a50d20a5b1
Rewrap long lines.
2009-09-16 15:57:46 +00:00
Andrew M. Kuchling
a178a69819
Fix 'the the' duplication
2009-04-03 21:45:29 +00:00
Benjamin Peterson
a7b55a33f8
revert r69777 since all the experts agree that extra import lines distract from the code
2009-02-20 03:31:23 +00:00
Jeroen Ruigrok van der Werven
5149742e8b
Since we recommend one module per import line, reflect this also in the
...
documentation.
2009-02-19 18:52:21 +00:00
Georg Brandl
c62ef8b4d9
Remove trailing whitespace.
2009-01-03 20:55:06 +00:00
Bill Janssen
61c001a939
incorporate fixes from issue 3162; SSL doc patch
2008-09-08 16:37:24 +00:00
Bill Janssen
5bfbd763f3
update ssl documentation
2008-08-12 17:09:57 +00:00
Bill Janssen
934b16d0c2
various SSL fixes; issues 1251, 3162, 3212
2008-06-28 22:19:33 +00:00
Andrew M. Kuchling
aea8d2e8cd
Use correct parameter name
2008-04-18 02:40:47 +00:00
Georg Brandl
2b92f6bab3
Diverse markup fixes.
2007-12-06 01:52:24 +00:00
Andrew M. Kuchling
529b1a91ce
Fix protocol name
2007-10-20 19:25:37 +00:00
Bill Janssen
296a59d3be
Add support for asyncore server-side SSL support. This requires
...
adding the 'makefile' method to ssl.SSLSocket, and importing the
requisite fakefile class from socket.py, and making the appropriate
changes to it to make it use the SSL connection.
Added sample HTTPS server to test_ssl.py, and test that uses it.
Change SSL tests to use https://svn.python.org/ , instead of
www.sf.net and pop.gmail.com.
Added utility function to ssl module, get_server_certificate,
to wrap up the several things to be done to pull a certificate
from a remote server.
2007-09-16 22:06:00 +00:00
Bill Janssen
93bf9ce9b7
Fix some documentation bugs.
2007-09-11 02:42:07 +00:00
Bill Janssen
98d19dafd9
More work on SSL support.
...
* Much expanded test suite:
All protocols tested against all other protocols.
All protocols tested with all certificate options.
Tests for bad key and bad cert.
Test of STARTTLS functionality.
Test of RAND_* functions.
* Fixes for threading/malloc bug.
* Issue 1065 fixed:
sslsocket class renamed to SSLSocket.
sslerror class renamed to SSLError.
Function "wrap_socket" now used to wrap an existing socket.
* Issue 1583946 finally fixed:
Support for subjectAltName added.
Subject name now returned as proper DN list of RDNs.
* SSLError exported from socket as "sslerror".
* RAND_* functions properly exported from ssl.py.
* Documentation improved:
Example of how to create a self-signed certificate.
Better indexing.
2007-09-10 21:51:02 +00:00
Bill Janssen
ffe576dc78
SSL certificate distinguished names should be represented by tuples
2007-09-05 00:46:27 +00:00
Bill Janssen
426ea0a864
This contains a number of things:
...
1) Improve the documentation of the SSL module, with a fuller
explanation of certificate usage, another reference, proper
formatting of this and that.
2) Fix Windows bug in ssl.py, and general bug in sslsocket.close().
Remove some unused code from ssl.py. Allow accept() to be called on
sslsocket sockets.
3) Use try-except-else in import of ssl in socket.py. Deprecate use of
socket.ssl().
4) Remove use of socket.ssl() in every library module, except for
test_socket_ssl.py and test_ssl.py.
2007-08-29 22:35:05 +00:00
Guido van Rossum
8ee23bbe7c
Patch 10124 by Bill Janssen, docs for the new ssl code.
2007-08-27 19:11:11 +00:00