[issue33618] Support TLS 1.3

[Christian Heimes]

Christian Heimes <lists at cheimes.de> added the comment:

More:

* We also need a new API to request TLS client cert authentication *after* some application data was requested. The use case is e.g. HTTP web server. A client sends a GET request and then the server gets to decide if the route requires authentication or not.

* Renegotiation is no longer available (good). TLS 1.3 has a new re-keying mechanism to establish a new master key.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue33618>
_______________________________________