From: Benjamin Peterson <benjamin@python.org>
Date: Mon, 13 Oct 2014 15:53:54 +0000 (-0400)
Subject: note xmlrpclib doesn't verify certs (yet)
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=078ece20e448cf9b2687c5a1c4925e7efe3c42a2;p=python

note xmlrpclib doesn't verify certs (yet)
---

diff --git a/Doc/library/xmlrpclib.rst b/Doc/library/xmlrpclib.rst
index 0e9ff4b4ff..766a796c3d 100644
--- a/Doc/library/xmlrpclib.rst
+++ b/Doc/library/xmlrpclib.rst
@@ -34,6 +34,11 @@ between conformable Python objects and XML on the wire.
    constructed data.  If you need to parse untrusted or unauthenticated data see
    :ref:`xml-vulnerabilities`.
 
+.. warning::
+
+   In the case of https URIS, :mod:`xmlrpclib` does not do any verification of
+   the server's certificate.
+
 
 .. class:: ServerProxy(uri[, transport[, encoding[, verbose[,  allow_none[, use_datetime]]]]])