From: Benjamin Peterson <benjamin@python.org>
Date: Mon, 13 Oct 2014 15:54:50 +0000 (-0400)
Subject: note xmlrpclib doesn't verify certs (yet)
X-Git-Tag: v3.4.3rc1~480^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=77a75b3db1b3c63833067f6864e62dcf312ded05;p=thirdparty%2FPython%2Fcpython.git

note xmlrpclib doesn't verify certs (yet)
---

diff --git a/Doc/library/xmlrpc.client.rst b/Doc/library/xmlrpc.client.rst
index 3cb19d186267..6471ba2f2ed6 100644
--- a/Doc/library/xmlrpc.client.rst
+++ b/Doc/library/xmlrpc.client.rst
@@ -27,6 +27,11 @@ between conformable Python objects and XML on the wire.
    constructed data.  If you need to parse untrusted or unauthenticated data see
    :ref:`xml-vulnerabilities`.
 
+.. warning::
+
+   In the case of https URIS, :mod:`xmlrpc.client` does not do any verification
+   of the server's certificate.
+
 
 .. class:: ServerProxy(uri, transport=None, encoding=None, verbose=False, \
                        allow_none=False, use_datetime=False, \