From: Benjamin Peterson <benjamin@python.org>
Date: Sun, 7 Dec 2014 18:46:02 +0000 (-0500)
Subject: use context's check_hostname attribute rather than the HTTPSHandler check_hostname... 
X-Git-Tag: v3.4.3rc1~252
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b666697fa8e815ca09ace0cd6d4cd2bd76080f5e;p=thirdparty%2FPython%2Fcpython.git

use context's check_hostname attribute rather than the HTTPSHandler check_hostname parameter
---

diff --git a/Lib/urllib/request.py b/Lib/urllib/request.py
index e0c811637329..6da9007ac80e 100644
--- a/Lib/urllib/request.py
+++ b/Lib/urllib/request.py
@@ -146,10 +146,10 @@ def urlopen(url, data=None, timeout=socket._GLOBAL_DEFAULT_TIMEOUT,
             )
         if not _have_ssl:
             raise ValueError('SSL support not available')
-        context = ssl._create_stdlib_context(cert_reqs=ssl.CERT_REQUIRED,
+        context = ssl.create_default_context(ssl.Purpose.SERVER_AUTH,
                                              cafile=cafile,
                                              capath=capath)
-        https_handler = HTTPSHandler(context=context, check_hostname=True)
+        https_handler = HTTPSHandler(context=context)
         opener = build_opener(https_handler)
     elif context:
         https_handler = HTTPSHandler(context=context)