From 3a892c75b52b23c08a6ed019afc8bfc90d0207e6 Mon Sep 17 00:00:00 2001 From: Robby Simpson <58122366+RobBotic1@users.noreply.github.com> Date: Tue, 25 Jul 2023 17:38:01 -0400 Subject: [PATCH] Update ssl.rst to show a range of TLS versions supported by a context. --- Doc/library/ssl.rst | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Doc/library/ssl.rst b/Doc/library/ssl.rst index 1f8bbe1e3de3ee..d59f3a16fe1f0d 100644 --- a/Doc/library/ssl.rst +++ b/Doc/library/ssl.rst @@ -2588,11 +2588,11 @@ disabled by default. :: >>> client_context = ssl.SSLContext(ssl.PROTOCOL_TLS_CLIENT) - >>> client_context.minimum_version = ssl.TLSVersion.TLSv1_3 + >>> client_context.minimum_version = ssl.TLSVersion.TLSv1_2 >>> client_context.maximum_version = ssl.TLSVersion.TLSv1_3 -The SSL context created above will only allow TLSv1.3 and later (if +The SSL context created above will only allow TLSv1.2 and TLSv1.3 (if supported by your system) connections to a server. :const:`PROTOCOL_TLS_CLIENT` implies certificate validation and hostname checks by default. You have to load certificates into the context.