gh-73580: Docs for tunnelling TLS through TLS (GH-22539)

diff --git a/Doc/library/ssl.rst b/Doc/library/ssl.rst
index fa81c3f208cff7ebb8344c0de904ed7bd50c4333..ce8f3dd2d317c18af2aa725c85a1bba67af6cc84 100644 (file)
--- a/Doc/library/ssl.rst
+++ b/Doc/library/ssl.rst
@@ -1790,6 +1790,9 @@ to speed up repeated connections from the same clients.
 
    *session*, see :attr:`~SSLSocket.session`.
 
+   To wrap an :class:`SSLSocket` in another :class:`SSLSocket`, use
+   :meth:`SSLContext.wrap_bio`.
+
    .. versionchanged:: 3.5
       Always allow a server_hostname to be passed, even if OpenSSL does not
       have SNI.