summaryrefslogtreecommitdiff
path: root/Misc/NEWS.d/next/Library/2019-06-27-13-27-02.bpo-37428._wcwUd.rst
diff options
context:
space:
mode:
Diffstat (limited to 'Misc/NEWS.d/next/Library/2019-06-27-13-27-02.bpo-37428._wcwUd.rst')
-rw-r--r--Misc/NEWS.d/next/Library/2019-06-27-13-27-02.bpo-37428._wcwUd.rst4
1 files changed, 4 insertions, 0 deletions
diff --git a/Misc/NEWS.d/next/Library/2019-06-27-13-27-02.bpo-37428._wcwUd.rst b/Misc/NEWS.d/next/Library/2019-06-27-13-27-02.bpo-37428._wcwUd.rst
new file mode 100644
index 0000000000..2cdce6b24d
--- /dev/null
+++ b/Misc/NEWS.d/next/Library/2019-06-27-13-27-02.bpo-37428._wcwUd.rst
@@ -0,0 +1,4 @@
+SSLContext.post_handshake_auth = True no longer sets
+SSL_VERIFY_POST_HANDSHAKE verify flag for client connections. Although the
+option is documented as ignored for clients, OpenSSL implicitly enables cert
+chain validation when the flag is set.