]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
gh-105293: Do not call SSL_CTX_set_session_id_context on client side SSL context...
authorGrant Ramsay <grant.ramsay@hotmail.com>
Fri, 14 Jul 2023 07:10:54 +0000 (19:10 +1200)
committerGitHub <noreply@github.com>
Fri, 14 Jul 2023 07:10:54 +0000 (00:10 -0700)
commit21d98be42289369ccfbdcc38574cb9ab50ce1c02
tree3f61dfa3a21a0630fcbf39b91dc1940fed0bd8b7
parent490295d651d04ec3b3eff2a2cda7501191bad78a
gh-105293: Do not call SSL_CTX_set_session_id_context on client side SSL context (#105295)

* gh-105293: Do not call SSL_CTX_set_session_id_context on client side SSL context

Openssl states this is a "server side only" operation.
Calling this on a client side socket can result in unexpected behavior

* Add news entry on SSL "set session id context" changes
Misc/NEWS.d/next/Library/2023-07-14-14-53-58.gh-issue-105293.kimf_i.rst [new file with mode: 0644]
Modules/_ssl.c