[issue24372] Documentation for ssl.wrap_socket's ssl_version parameter is odd

Change by Eric V. Smith : -- resolution: -> out of date stage: -> resolved status: pending -> closed ___ Python tracker ___ ___ Py

[issue24372] Documentation for ssl.wrap_socket's ssl_version parameter is odd

Christian Heimes added the comment: OpenSSL 1.1.0 has deprecated all versions except TLS_METHOD and DTLS_METHOD. TLS_METHOD is the new name for auto-nego SSLv23_METHOD. Python 3.6 defaults to TLS_METHOD already. #27876 will add a better way to configure accepted versions. -- status: op

[issue24372] Documentation for ssl.wrap_socket's ssl_version parameter is odd

Eric V. Smith added the comment: I have a requirement to support 2.7.5, so SSLContext is currently a problem for me. I realize that 2.7 could at best get a documentation change. -- ___ Python tracker

[issue24372] Documentation for ssl.wrap_socket's ssl_version parameter is odd

Christian Heimes added the comment: DISCLAIMER: I'm currently planning and researching two SSL related PEPs. One PEP is about SSLContext. I like to standardize a minimal interface for SSL context object, so libraries can deal with any abitrary SSL implementation. With just one small addition

[issue24372] Documentation for ssl.wrap_socket's ssl_version parameter is odd

Christian Heimes added the comment: I'd like to deprecate ssl.wrap_socket() in favor of SSLContext.wrap_socket(). Libraries should rather accept a context than expose the awkward interface of ssl.wrap_socket(). A context object is far more powerful and easier to use. -- __

[issue24372] Documentation for ssl.wrap_socket's ssl_version parameter is odd

Changes by Christian Heimes : -- nosy: +christian.heimes ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https:

[issue24372] Documentation for ssl.wrap_socket's ssl_version parameter is odd

Eric V. Smith added the comment: It occurs to me that None would also be a fine default, and probably the smarter choice. Then wrap_socket could say: if ssl_version is None: ssl_version = PROTOCOL_SSLv23 And we could change the default as needed, without being held to the actual value. And

[issue24372] Documentation for ssl.wrap_socket's ssl_version parameter is odd

New submission from Eric V. Smith: The documentation for ssl.wrap_socket()'s ssl_version parameter says "ssl_version={see docs}". But as far as I can tell, there's no reason not to document it as PROTOCOL_SSLv23, since that's what it actually is in the code. My use case is that I'm producing a