From: Antoine Pitrou <solipsis@pitrou.net>
Date: Sun, 17 Nov 2013 14:36:03 +0000 (+0100)
Subject: Issue #19508: direct the user to read the security considerations for the ssl module
X-Git-Tag: v3.4.0b1~225
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=6b2b084192a4acf53249c47b44b1984d6c304a98;p=thirdparty%2FPython%2Fcpython.git

Issue #19508: direct the user to read the security considerations for the ssl module
---

6b2b084192a4acf53249c47b44b1984d6c304a98
diff --cc Doc/library/ssl.rst
index 5af56f9bb57e,c4e171276729..96cae9d07294
--- a/Doc/library/ssl.rst
+++ b/Doc/library/ssl.rst
@@@ -26,16 -26,13 +26,14 @@@ probably additional platforms, as long 
  
     Some behavior may be platform dependent, since calls are made to the
     operating system socket APIs.  The installed version of OpenSSL may also
 -   cause variations in behavior.
 +   cause variations in behavior. For example, TLSv1.1 and TLSv1.2 come with
 +   openssl version 1.0.1.
  
  .. warning::
+    Don't use this module without reading the :ref:`ssl-security`.  Doing so
+    may lead to a false sense of security, as the default settings of the
+    ssl module are not necessarily appropriate for your application.
  
-    OpenSSL's internal random number generator does not properly handle fork.
-    Applications must change the PRNG state of the parent process if they use
-    any SSL feature with :func:`os.fork`. Any successful call of
-    :func:`~ssl.RAND_add`, :func:`~ssl.RAND_bytes` or
-    :func:`~ssl.RAND_pseudo_bytes` is sufficient.
  
  This section documents the objects and functions in the ``ssl`` module; for more
  general information about TLS, SSL, and certificates, the reader is referred to