bpo-37440: Enable TLS 1.3 post-handshake auth in http.client (GH-14448)

Post-handshake authentication is required for conditional client cert authentication with TLS 1.3.


https://bugs.python.org/issue37440
This commit is contained in:
Christian Heimes 2019-07-01 08:32:24 +02:00 committed by Miss Islington (bot)
parent f0f5930ac8
commit d1bd6e79da
4 changed files with 32 additions and 0 deletions

View file

@ -94,6 +94,11 @@ The module provides the following classes:
:func:`ssl._create_unverified_context` can be passed to the *context*
parameter.
.. versionchanged:: 3.8
This class now enables TLS 1.3
:attr:`ssl.SSLContext.post_handshake_auth` for the default *context* or
when *cert_file* is passed with a custom *context*.
.. deprecated:: 3.6
*key_file* and *cert_file* are deprecated in favor of *context*.