mirrors/cpython
1
0
Fork 0
mirror of https://github.com/python/cpython.git synced 2025-11-08 05:39:34 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 8

Merged revisions 85101 via svnmerge from

Browse source 
svn+ssh://pythondev@svn.python.org/python/branches/py3k

........
  r85101 | antoine.pitrou | 2010-09-29 13:24:21 +0200 (mer., 29 sept. 2010) | 3 lines

  Issue #9983: warn that urllib and httplib don't perform SSL certificate validation.
........
This commit is contained in:
Antoine Pitrou 2010-09-29 11:25:47 +00:00
parent 6e4dc80201
commit 509dd54093
2 changed files with 10 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

10
Doc/library/http.client.rst
View file

@ -49,12 +49,12 @@ The module provides the following classes:
A subclass of :class:`HTTPConnection` that uses SSL for communication with A subclass of :class:`HTTPConnection` that uses SSL for communication with
secure servers. Default port is ``443``. *key_file* is the name of a PEM secure servers. Default port is ``443``. *key_file* is the name of a PEM
formatted file that contains your private key. *cert_file* is a PEM formatted formatted file that contains your private key, and *cert_file* is a PEM
certificate chain file. formatted certificate chain file; both can be used for authenticating
yourself against the server.
.. note:: .. warning::
This does not do any verification of the server's certificate.
This does not do any certificate verification.
.. class:: HTTPResponse(sock, debuglevel=0, strict=0, method=None, url=None) .. class:: HTTPResponse(sock, debuglevel=0, strict=0, method=None, url=None)

4
Doc/library/urllib.request.rst
View file

@ -11,6 +11,10 @@ The :mod:`urllib.request` module defines functions and classes which help in
opening URLs (mostly HTTP) in a complex world --- basic and digest opening URLs (mostly HTTP) in a complex world --- basic and digest
authentication, redirections, cookies and more. authentication, redirections, cookies and more.
.. warning:: When opening HTTPS (or FTPS) URLs, it is not attempted to
validate the server certificate. Use at your own risk!
The :mod:`urllib.request` module defines the following functions: The :mod:`urllib.request` module defines the following functions: