[3.11] gh-73580: Docs for tunnelling TLS through TLS (GH-22539) (GH-116150)

(cherry picked from commit 91c3c64237f56bde9d1c1b8127fdcb02a112b5a4)

Co-authored-by: Carl Bordum Hansen <carl@bordum.dk>

diff --git a/Doc/library/ssl.rst b/Doc/library/ssl.rst
index bda3e98d9b0feb5c15fdd9663605a0da58d78c6a..5dbe554d858ad775047516bf8636698e37fdc319 100644 (file)
--- a/Doc/library/ssl.rst
+++ b/Doc/library/ssl.rst
@@ -1860,6 +1860,9 @@ to speed up repeated connections from the same clients.
 
    *session*, see :attr:`~SSLSocket.session`.
 
+   To wrap an :class:`SSLSocket` in another :class:`SSLSocket`, use
+   :meth:`SSLContext.wrap_bio`.
+
    .. versionchanged:: 3.5
       Always allow a server_hostname to be passed, even if OpenSSL does not
       have SNI.