[Python-checkins] bpo-39616: clarify SSLContext.check_hostname effect (GH-18484)

miss-islington webhook-mailer at python.org
Sat Mar 27 10:30:06 EDT 2021


https://github.com/python/cpython/commit/9de6451558c38537b2335d6e04e3bf8743c30576
commit: 9de6451558c38537b2335d6e04e3bf8743c30576
branch: 3.8
author: Miss Islington (bot) <31488909+miss-islington at users.noreply.github.com>
committer: miss-islington <31488909+miss-islington at users.noreply.github.com>
date: 2021-03-27T07:29:50-07:00
summary:

bpo-39616: clarify SSLContext.check_hostname effect (GH-18484)


It doesn't actually affect whether match_hostname() is called (it
never is in this context any longer), but whether hostname
verification occurs in the first place.
(cherry picked from commit 9798cef92b882cd82a338d3368eaf3c4a32f5c2d)

Co-authored-by: Ville Skyttä <ville.skytta at iki.fi>

files:
M Doc/library/ssl.rst

diff --git a/Doc/library/ssl.rst b/Doc/library/ssl.rst
index 04523e914072e..24b46ca1c7dc1 100644
--- a/Doc/library/ssl.rst
+++ b/Doc/library/ssl.rst
@@ -1878,7 +1878,7 @@ to speed up repeated connections from the same clients.
 
 .. attribute:: SSLContext.check_hostname
 
-   Whether to match the peer cert's hostname with :func:`match_hostname` in
+   Whether to match the peer cert's hostname in
    :meth:`SSLSocket.do_handshake`. The context's
    :attr:`~SSLContext.verify_mode` must be set to :data:`CERT_OPTIONAL` or
    :data:`CERT_REQUIRED`, and you must pass *server_hostname* to



More information about the Python-checkins mailing list