Skip to content

Commit 63c2c8a

Browse files
chkumar246ncoghlan
authored andcommitted
bpo-19180: Updated references for RFC 1750, RFC 3280 & RFC 4366 (GH-148)
* RFC 1750 has been been obsoleted by RFC 4086. * RFC 3280 has been obsoleted by RFC 5280. * RFC 4366 has been obsoleted by RFC 6066.
1 parent 59fdf0f commit 63c2c8a

File tree

3 files changed

+10
-13
lines changed

3 files changed

+10
-13
lines changed

Doc/library/ssl.rst

Lines changed: 8 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -378,9 +378,9 @@ Certificate handling
378378
Verify that *cert* (in decoded format as returned by
379379
:meth:`SSLSocket.getpeercert`) matches the given *hostname*. The rules
380380
applied are those for checking the identity of HTTPS servers as outlined
381-
in :rfc:`2818` and :rfc:`6125`. In addition to HTTPS, this function
382-
should be suitable for checking the identity of servers in various
383-
SSL-based protocols such as FTPS, IMAPS, POPS and others.
381+
in :rfc:`2818`, :rfc:`5280` and :rfc:`6125`. In addition to HTTPS, this
382+
function should be suitable for checking the identity of servers in
383+
various SSL-based protocols such as FTPS, IMAPS, POPS and others.
384384

385385
:exc:`CertificateError` is raised on failure. On success, the function
386386
returns nothing::
@@ -824,7 +824,7 @@ Constants
824824
.. data:: HAS_SNI
825825

826826
Whether the OpenSSL library has built-in support for the *Server Name
827-
Indication* extension (as defined in :rfc:`4366`).
827+
Indication* extension (as defined in :rfc:`6066`).
828828

829829
.. versionadded:: 3.2
830830

@@ -2313,14 +2313,11 @@ successful call of :func:`~ssl.RAND_add`, :func:`~ssl.RAND_bytes` or
23132313
`RFC 1422: Privacy Enhancement for Internet Electronic Mail: Part II: Certificate-Based Key Management <https://www.ietf.org/rfc/rfc1422>`_
23142314
Steve Kent
23152315

2316-
`RFC 1750: Randomness Recommendations for Security <https://www.ietf.org/rfc/rfc1750>`_
2317-
D. Eastlake et. al.
2316+
`RFC 4086: Randomness Requirements for Security <http://datatracker.ietf.org/doc/rfc4086/>`_
2317+
Donald E., Jeffrey I. Schiller
23182318

2319-
`RFC 3280: Internet X.509 Public Key Infrastructure Certificate and CRL Profile <https://www.ietf.org/rfc/rfc3280>`_
2320-
Housley et. al.
2321-
2322-
`RFC 4366: Transport Layer Security (TLS) Extensions <https://www.ietf.org/rfc/rfc4366>`_
2323-
Blake-Wilson et. al.
2319+
`RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile <http://datatracker.ietf.org/doc/rfc5280/>`_
2320+
D. Cooper
23242321

23252322
`RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2 <https://tools.ietf.org/html/rfc5246>`_
23262323
T. Dierks et. al.

Modules/_ssl.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4440,7 +4440,7 @@ _ssl.RAND_add
44404440
Mix string into the OpenSSL PRNG state.
44414441
44424442
entropy (a float) is a lower bound on the entropy contained in
4443-
string. See RFC 1750.
4443+
string. See RFC 4086.
44444444
[clinic start generated code]*/
44454445

44464446
static PyObject *

Modules/clinic/_ssl.c.h

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -847,7 +847,7 @@ PyDoc_STRVAR(_ssl_RAND_add__doc__,
847847
"Mix string into the OpenSSL PRNG state.\n"
848848
"\n"
849849
"entropy (a float) is a lower bound on the entropy contained in\n"
850-
"string. See RFC 1750.");
850+
"string. See RFC 4086.");
851851

852852
#define _SSL_RAND_ADD_METHODDEF \
853853
{"RAND_add", (PyCFunction)_ssl_RAND_add, METH_FASTCALL, _ssl_RAND_add__doc__},

0 commit comments

Comments
 (0)