Skip to content

Commit 86aa7d2

Browse files
committed
Drop remark about anonymous ciphers
The documentation no longer mentions anonymous ciphers. They are totally insecure and irrelevant for virtually all users. The documentation was also wrong. For anonymous ciphers, CERT_NONE, CERT_OPTIONAL and CERT_REQUIRED all behaved the same. Internally, CERT_REQUIRED = SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT but the last flag is ignored in client mode. When a anonymous cipher is used, clients ignore missing server certs. Signed-off-by: Christian Heimes <[email protected]>
1 parent 22cf50b commit 86aa7d2

File tree

1 file changed

+0
-5
lines changed

1 file changed

+0
-5
lines changed

Doc/library/ssl.rst

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -2553,11 +2553,6 @@ In server mode, if you want to authenticate your clients using the SSL layer
25532553
(rather than using a higher-level authentication mechanism), you'll also have
25542554
to specify :const:`CERT_REQUIRED` and similarly check the client certificate.
25552555

2556-
.. note::
2557-
2558-
In client mode, :const:`CERT_OPTIONAL` and :const:`CERT_REQUIRED` are
2559-
equivalent unless anonymous ciphers are enabled (they are disabled
2560-
by default).
25612556

25622557
Protocol versions
25632558
'''''''''''''''''

0 commit comments

Comments
 (0)