python / python/cpython

[ssl] Remove deprecated protocols, OP_NO_TLS/SSL, and support for TLS < 1.2

Open
#94,598 2 comments 0 reactions 1 assignee View on GitHub

@tiran is already working on this.

Since Jul 6, 2022.

3.13 stdlib topic-SSL type-feature
Dominant language
Python
Stars
77.2k
Forks
36k
PR metrics pending

Description

Feature or enhancement

Python 3.10 or earlier versions of Python have deprecated

  • all PROTOCOL_* constants except PROTOCOL_TLS_CLIENT and PROTOCOL_TLS_CLIENT
  • SSLContext without a protocol parameter
  • all OP_NO_TLS* and OP_NO_SSL* options
  • support for SSL 2.0, SSL 3.0, TLS 1.0, and TLS 1.1

It is time to remove the constants and features.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.