From 19048c3ada0a0ad5c3fd76099dc028d6261a06fa Mon Sep 17 00:00:00 2001 From: Senthil Kumaran Date: Fri, 27 Jan 2017 23:05:34 -0800 Subject: [PATCH] Add clarity to the warning on certificate verification in urllib. --- Doc/library/urllib.rst | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/Doc/library/urllib.rst b/Doc/library/urllib.rst index 439482aeb988..2a5ea717f061 100644 --- a/Doc/library/urllib.rst +++ b/Doc/library/urllib.rst @@ -26,11 +26,16 @@ reading, and no seek operations are available. .. seealso:: - The `Requests package `_ + The `Requests package `_ is recommended for a higher-level HTTP client interface. -.. warning:: When opening HTTPS URLs, it does not attempt to validate the - server certificate. Use at your own risk! +.. versionchanged:: 2.7.9 + + For HTTPS URIs, :mod:`urllib` performs all the neccessary certificate and hostname checks by default. + +.. warning:: + + For Python versions earlier than 2.7.9, urllib does not attempt to validate the server certificates of HTTPS URIs. Use at your own risk! High-level interface @@ -142,7 +147,7 @@ High-level interface :envvar:`no_proxy` environment variable. .. versionchanged:: 2.7.9 - The *context* parameter was added. + The *context* parameter was added. All the neccessary certificate and hostname checks are done by default. .. deprecated:: 2.6 The :func:`urlopen` function has been removed in Python 3 in favor -- 2.47.3