[Python-checkins] r80151 - in python/trunk: Doc/library/ssl.rst Lib/ssl.py Lib/test/test_ssl.py Misc/NEWS Modules/_ssl.c

[R. David Murray]

On Sat, 17 Apr 2010 19:10:38 +0200, antoine.pitrou <python-checkins at python.org> wrote:
> +   .. note::
> +
> +      This information varies depending on the version of OpenSSL.
> +      For instance, in some older versions of OpenSSL (such as 0.9.7l on
> +      OS X 10.4), an SSLv2 client could not connect to an SSLv23 server.
> +      Conversely, starting from 1.0.0, an SSLv23 client will actually
> +      try the SSLv3 protocol unless you explicitly enable SSLv2 ciphers.

Maybe it's just my lack of knowledge of SSL, but I don't know what the
sentence "starting from 1.0.0, an SSLv23 client will actually try the
SSLv3 protocol unless you explicitly enable SSLv2 ciphers" is trying
to tell me.  If I reword it to say "SSLv23 client will only try..." it
becomes meaningful, but I don't know if that is correct or not.

--
R. David Murray                                      www.bitdance.com