From: Antoine Pitrou Date: Wed, 29 Sep 2010 11:24:21 +0000 (+0000) Subject: Issue #9983: warn that urllib and httplib don't perform SSL certificate validation. X-Git-Tag: v3.2a3~100 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=79ecd7621e9cacbe10b7429633f9e3f77dcd6429;p=python Issue #9983: warn that urllib and httplib don't perform SSL certificate validation. --- diff --git a/Doc/library/http.client.rst b/Doc/library/http.client.rst index 2a5c37c78f..9df61b720d 100644 --- a/Doc/library/http.client.rst +++ b/Doc/library/http.client.rst @@ -53,13 +53,13 @@ The module provides the following classes: .. class:: HTTPSConnection(host, port=None, key_file=None, cert_file=None, strict=None[, timeout[, source_address]]) A subclass of :class:`HTTPConnection` that uses SSL for communication with - secure servers. Default port is ``443``. *key_file* is the name of a PEM - formatted file that contains your private key. *cert_file* is a PEM formatted - certificate chain file. + secure servers. Default port is ``443``. *key_file* is the name of a PEM + formatted file that contains your private key, and *cert_file* is a PEM + formatted certificate chain file; both can be used for authenticating + yourself against the server. - .. note:: - - This does not do any certificate verification. + .. warning:: + This does not do any verification of the server's certificate. .. versionchanged:: 3.2 *source_address* was added. diff --git a/Doc/library/urllib.request.rst b/Doc/library/urllib.request.rst index 157896879b..4a897ad8e6 100644 --- a/Doc/library/urllib.request.rst +++ b/Doc/library/urllib.request.rst @@ -11,6 +11,10 @@ The :mod:`urllib.request` module defines functions and classes which help in opening URLs (mostly HTTP) in a complex world --- basic and digest authentication, redirections, cookies and more. +.. warning:: When opening HTTPS (or FTPS) URLs, it is not attempted to + validate the server certificate. Use at your own risk! + + The :mod:`urllib.request` module defines the following functions: