forked from AFPy/python-docs-fr
2132 lines
76 KiB
Plaintext
2132 lines
76 KiB
Plaintext
# SOME DESCRIPTIVE TITLE.
|
||
# Copyright (C) 1990-2016, Python Software Foundation
|
||
# This file is distributed under the same license as the Python package.
|
||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||
#
|
||
#, fuzzy
|
||
msgid ""
|
||
msgstr ""
|
||
"Project-Id-Version: Python 2.7\n"
|
||
"Report-Msgid-Bugs-To: \n"
|
||
"POT-Creation-Date: 2016-10-30 10:44+0100\n"
|
||
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
|
||
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
|
||
"Language-Team: LANGUAGE <LL@li.org>\n"
|
||
"MIME-Version: 1.0\n"
|
||
"Content-Type: text/plain; charset=UTF-8\n"
|
||
"Content-Transfer-Encoding: 8bit\n"
|
||
|
||
#: ../Doc/library/ssl.rst:2
|
||
msgid ":mod:`ssl` --- TLS/SSL wrapper for socket objects"
|
||
msgstr ":mod:`ssl` — Emballage TLS/SSL pour les objets connecteurs"
|
||
|
||
#: ../Doc/library/ssl.rst:17
|
||
msgid "**Source code:** :source:`Lib/ssl.py`"
|
||
msgstr "**Code source :** :source:`Lib/ssl.py`"
|
||
|
||
#: ../Doc/library/ssl.rst:21
|
||
msgid ""
|
||
"This module provides access to Transport Layer Security (often known as "
|
||
"\"Secure Sockets Layer\") encryption and peer authentication facilities for "
|
||
"network sockets, both client-side and server-side. This module uses the "
|
||
"OpenSSL library. It is available on all modern Unix systems, Windows, Mac OS "
|
||
"X, and probably additional platforms, as long as OpenSSL is installed on "
|
||
"that platform."
|
||
msgstr ""
|
||
"Ce module fournit un accès aux fonctions de chiffrement et "
|
||
"d'authentification entre pairs : « *Transport Layer Security* » (souvent "
|
||
"appelé « *Secure Sockets Layer* ») pour les connecteurs réseau, côté client "
|
||
"et côté serveur. Ce module utilise la bibliothèque OpenSSL. Il est "
|
||
"disponible sur tous les systèmes Unix modernes, Windows, Mac OS X et "
|
||
"probablement sur d'autres plates-formes, à condition qu'OpenSSL soit "
|
||
"installé sur cette plate-forme."
|
||
|
||
#: ../Doc/library/ssl.rst:29
|
||
msgid ""
|
||
"Some behavior may be platform dependent, since calls are made to the "
|
||
"operating system socket APIs. The installed version of OpenSSL may also "
|
||
"cause variations in behavior. For example, TLSv1.1 and TLSv1.2 come with "
|
||
"openssl version 1.0.1."
|
||
msgstr ""
|
||
"Certains comportements peuvent dépendre de la plate-forme, car des appels "
|
||
"sont passés aux API de connexions du système d'exploitation. La version "
|
||
"installée de OpenSSL peut également entraîner des variations de "
|
||
"comportement. Par exemple, TLSv1.1 et TLSv1.2 sont livrés avec la version "
|
||
"1.0.1 de OpenSSL."
|
||
|
||
#: ../Doc/library/ssl.rst:35
|
||
msgid ""
|
||
"Don't use this module without reading the :ref:`ssl-security`. Doing so may "
|
||
"lead to a false sense of security, as the default settings of the ssl module "
|
||
"are not necessarily appropriate for your application."
|
||
msgstr ""
|
||
"N’utilisez pas ce module sans lire :ref:`ssl-security`. Cela pourrait créer "
|
||
"un faux sentiment de sécurité, car les paramètres par défaut du module *ssl* "
|
||
"ne sont pas nécessairement appropriés pour votre application."
|
||
|
||
#: ../Doc/library/ssl.rst:40
|
||
msgid ""
|
||
"This section documents the objects and functions in the ``ssl`` module; for "
|
||
"more general information about TLS, SSL, and certificates, the reader is "
|
||
"referred to the documents in the \"See Also\" section at the bottom."
|
||
msgstr ""
|
||
"Cette section documente les objets et les fonctions du module ``ssl``. Pour "
|
||
"des informations plus générales sur TLS, SSL et les certificats, le lecteur "
|
||
"est prié de se référer aux documents de la section « Voir Aussi » au bas de "
|
||
"cette page."
|
||
|
||
#: ../Doc/library/ssl.rst:44
|
||
msgid ""
|
||
"This module provides a class, :class:`ssl.SSLSocket`, which is derived from "
|
||
"the :class:`socket.socket` type, and provides a socket-like wrapper that "
|
||
"also encrypts and decrypts the data going over the socket with SSL. It "
|
||
"supports additional methods such as :meth:`getpeercert`, which retrieves the "
|
||
"certificate of the other side of the connection, and :meth:`cipher`,which "
|
||
"retrieves the cipher being used for the secure connection."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:51
|
||
msgid ""
|
||
"For more sophisticated applications, the :class:`ssl.SSLContext` class helps "
|
||
"manage settings and certificates, which can then be inherited by SSL sockets "
|
||
"created through the :meth:`SSLContext.wrap_socket` method."
|
||
msgstr ""
|
||
"Pour les applications plus sophistiquées, la classe :class:`ssl.SSLContext` "
|
||
"facilite la gestion des paramètres et des certificats, qui peuvent ensuite "
|
||
"être hérités par les connecteurs SSL créés via la méthode :meth:`SSLContext."
|
||
"wrap_socket`."
|
||
|
||
#: ../Doc/library/ssl.rst:57
|
||
msgid "Functions, Constants, and Exceptions"
|
||
msgstr "Fonctions, constantes et exceptions"
|
||
|
||
#: ../Doc/library/ssl.rst:61
|
||
msgid ""
|
||
"Raised to signal an error from the underlying SSL implementation (currently "
|
||
"provided by the OpenSSL library). This signifies some problem in the higher-"
|
||
"level encryption and authentication layer that's superimposed on the "
|
||
"underlying network connection. This error is a subtype of :exc:`socket."
|
||
"error`, which in turn is a subtype of :exc:`IOError`. The error code and "
|
||
"message of :exc:`SSLError` instances are provided by the OpenSSL library."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:71
|
||
msgid ""
|
||
"A string mnemonic designating the OpenSSL submodule in which the error "
|
||
"occurred, such as ``SSL``, ``PEM`` or ``X509``. The range of possible "
|
||
"values depends on the OpenSSL version."
|
||
msgstr ""
|
||
"Une chaîne de caractères mnémonique désignant le sous-module OpenSSL dans "
|
||
"lequel l'erreur s'est produite, telle que ``SSL``, ``PEM`` ou ``X509``. "
|
||
"L'étendue des valeurs possibles dépend de la version d'OpenSSL."
|
||
|
||
#: ../Doc/library/ssl.rst:79
|
||
msgid ""
|
||
"A string mnemonic designating the reason this error occurred, for example "
|
||
"``CERTIFICATE_VERIFY_FAILED``. The range of possible values depends on the "
|
||
"OpenSSL version."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:87
|
||
msgid ""
|
||
"A subclass of :exc:`SSLError` raised when trying to read or write and the "
|
||
"SSL connection has been closed cleanly. Note that this doesn't mean that "
|
||
"the underlying transport (read TCP) has been closed."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:95
|
||
msgid ""
|
||
"A subclass of :exc:`SSLError` raised by a :ref:`non-blocking SSL socket <ssl-"
|
||
"nonblocking>` when trying to read or write data, but more data needs to be "
|
||
"received on the underlying TCP transport before the request can be fulfilled."
|
||
msgstr ""
|
||
"Sous-classe de :exc:`SSLError` levée par un connecteur :ref:`SSL non "
|
||
"bloquant <ssl-nonblocking>` lors d'une tentative de lecture ou d'écriture de "
|
||
"données, alors que davantage de données doivent être reçues sur la couche "
|
||
"TCP sous-jacente avant que la demande puisse être satisfaite."
|
||
|
||
#: ../Doc/library/ssl.rst:104
|
||
msgid ""
|
||
"A subclass of :exc:`SSLError` raised by a :ref:`non-blocking SSL socket <ssl-"
|
||
"nonblocking>` when trying to read or write data, but more data needs to be "
|
||
"sent on the underlying TCP transport before the request can be fulfilled."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:113
|
||
msgid ""
|
||
"A subclass of :exc:`SSLError` raised when a system error was encountered "
|
||
"while trying to fulfill an operation on a SSL socket. Unfortunately, there "
|
||
"is no easy way to inspect the original errno number."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:121
|
||
msgid ""
|
||
"A subclass of :exc:`SSLError` raised when the SSL connection has been "
|
||
"terminated abruptly. Generally, you shouldn't try to reuse the underlying "
|
||
"transport when this error is encountered."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:129
|
||
msgid ""
|
||
"Raised to signal an error with a certificate (such as mismatching "
|
||
"hostname). Certificate errors detected by OpenSSL, though, raise an :exc:"
|
||
"`SSLError`."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:135
|
||
msgid "Socket creation"
|
||
msgstr "Création de connecteurs"
|
||
|
||
#: ../Doc/library/ssl.rst:137
|
||
msgid ""
|
||
"The following function allows for standalone socket creation. Starting from "
|
||
"Python 2.7.9, it can be more flexible to use :meth:`SSLContext.wrap_socket` "
|
||
"instead."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:143
|
||
msgid ""
|
||
"Takes an instance ``sock`` of :class:`socket.socket`, and returns an "
|
||
"instance of :class:`ssl.SSLSocket`, a subtype of :class:`socket.socket`, "
|
||
"which wraps the underlying socket in an SSL context. ``sock`` must be a :"
|
||
"data:`~socket.SOCK_STREAM` socket; other socket types are unsupported."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:148
|
||
msgid ""
|
||
"For client-side sockets, the context construction is lazy; if the underlying "
|
||
"socket isn't connected yet, the context construction will be performed "
|
||
"after :meth:`connect` is called on the socket. For server-side sockets, if "
|
||
"the socket has no remote peer, it is assumed to be a listening socket, and "
|
||
"the server-side SSL wrapping is automatically performed on client "
|
||
"connections accepted via the :meth:`accept` method. :func:`wrap_socket` may "
|
||
"raise :exc:`SSLError`."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:156
|
||
msgid ""
|
||
"The ``keyfile`` and ``certfile`` parameters specify optional files which "
|
||
"contain a certificate to be used to identify the local side of the "
|
||
"connection. See the discussion of :ref:`ssl-certificates` for more "
|
||
"information on how the certificate is stored in the ``certfile``."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:161
|
||
msgid ""
|
||
"The parameter ``server_side`` is a boolean which identifies whether server-"
|
||
"side or client-side behavior is desired from this socket."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:164
|
||
msgid ""
|
||
"The parameter ``cert_reqs`` specifies whether a certificate is required from "
|
||
"the other side of the connection, and whether it will be validated if "
|
||
"provided. It must be one of the three values :const:`CERT_NONE` "
|
||
"(certificates ignored), :const:`CERT_OPTIONAL` (not required, but validated "
|
||
"if provided), or :const:`CERT_REQUIRED` (required and validated). If the "
|
||
"value of this parameter is not :const:`CERT_NONE`, then the ``ca_certs`` "
|
||
"parameter must point to a file of CA certificates."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:172
|
||
msgid ""
|
||
"The ``ca_certs`` file contains a set of concatenated \"certification "
|
||
"authority\" certificates, which are used to validate certificates passed "
|
||
"from the other end of the connection. See the discussion of :ref:`ssl-"
|
||
"certificates` for more information about how to arrange the certificates in "
|
||
"this file."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:178
|
||
msgid ""
|
||
"The parameter ``ssl_version`` specifies which version of the SSL protocol to "
|
||
"use. Typically, the server chooses a particular protocol version, and the "
|
||
"client must adapt to the server's choice. Most of the versions are not "
|
||
"interoperable with the other versions. If not specified, the default is :"
|
||
"data:`PROTOCOL_SSLv23`; it provides the most compatibility with other "
|
||
"versions."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:185
|
||
msgid ""
|
||
"Here's a table showing which versions in a client (down the side) can "
|
||
"connect to which versions in a server (along the top):"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:191
|
||
msgid "*client* / **server**"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:191
|
||
msgid "**SSLv2**"
|
||
msgstr "**SSLv2**"
|
||
|
||
#: ../Doc/library/ssl.rst:191
|
||
msgid "**SSLv3**"
|
||
msgstr "**SSLv3**"
|
||
|
||
#: ../Doc/library/ssl.rst:191
|
||
msgid "**SSLv23**"
|
||
msgstr "**SSLv23**"
|
||
|
||
#: ../Doc/library/ssl.rst:191
|
||
msgid "**TLSv1**"
|
||
msgstr "**TLSv1**"
|
||
|
||
#: ../Doc/library/ssl.rst:191
|
||
msgid "**TLSv1.1**"
|
||
msgstr "**TLSv1.1**"
|
||
|
||
#: ../Doc/library/ssl.rst:191
|
||
msgid "**TLSv1.2**"
|
||
msgstr "**TLSv1.2**"
|
||
|
||
#: ../Doc/library/ssl.rst:193
|
||
msgid "*SSLv2*"
|
||
msgstr "*SSLv2*"
|
||
|
||
#: ../Doc/library/ssl.rst:193 ../Doc/library/ssl.rst:194
|
||
#: ../Doc/library/ssl.rst:195 ../Doc/library/ssl.rst:196
|
||
#: ../Doc/library/ssl.rst:197 ../Doc/library/ssl.rst:198
|
||
msgid "yes"
|
||
msgstr "oui"
|
||
|
||
#: ../Doc/library/ssl.rst:193 ../Doc/library/ssl.rst:194
|
||
#: ../Doc/library/ssl.rst:195 ../Doc/library/ssl.rst:196
|
||
#: ../Doc/library/ssl.rst:197 ../Doc/library/ssl.rst:198
|
||
msgid "no"
|
||
msgstr "non"
|
||
|
||
#: ../Doc/library/ssl.rst:194
|
||
msgid "*SSLv3*"
|
||
msgstr "*SSLv3*"
|
||
|
||
#: ../Doc/library/ssl.rst:195
|
||
msgid "*SSLv23*"
|
||
msgstr "*SSLv23*"
|
||
|
||
#: ../Doc/library/ssl.rst:196
|
||
msgid "*TLSv1*"
|
||
msgstr "*TLSv1*"
|
||
|
||
#: ../Doc/library/ssl.rst:197
|
||
msgid "*TLSv1.1*"
|
||
msgstr "*TLSv1.1*"
|
||
|
||
#: ../Doc/library/ssl.rst:198
|
||
msgid "*TLSv1.2*"
|
||
msgstr "*TLSv1.2*"
|
||
|
||
#: ../Doc/library/ssl.rst:203
|
||
msgid ""
|
||
"Which connections succeed will vary depending on the version of OpenSSL. "
|
||
"For example, before OpenSSL 1.0.0, an SSLv23 client would always attempt "
|
||
"SSLv2 connections."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:207
|
||
msgid ""
|
||
"The *ciphers* parameter sets the available ciphers for this SSL object. It "
|
||
"should be a string in the `OpenSSL cipher list format <https://www.openssl."
|
||
"org/docs/apps/ciphers.html#CIPHER-LIST-FORMAT>`_."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:211
|
||
msgid ""
|
||
"The parameter ``do_handshake_on_connect`` specifies whether to do the SSL "
|
||
"handshake automatically after doing a :meth:`socket.connect`, or whether the "
|
||
"application program will call it explicitly, by invoking the :meth:"
|
||
"`SSLSocket.do_handshake` method. Calling :meth:`SSLSocket.do_handshake` "
|
||
"explicitly gives the program control over the blocking behavior of the "
|
||
"socket I/O involved in the handshake."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:218
|
||
msgid ""
|
||
"The parameter ``suppress_ragged_eofs`` specifies how the :meth:`SSLSocket."
|
||
"read` method should signal unexpected EOF from the other end of the "
|
||
"connection. If specified as :const:`True` (the default), it returns a "
|
||
"normal EOF (an empty bytes object) in response to unexpected EOF errors "
|
||
"raised from the underlying socket; if :const:`False`, it will raise the "
|
||
"exceptions back to the caller."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:225
|
||
msgid "New optional argument *ciphers*."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:230
|
||
msgid "Context creation"
|
||
msgstr "Création de contexte"
|
||
|
||
#: ../Doc/library/ssl.rst:232
|
||
msgid ""
|
||
"A convenience function helps create :class:`SSLContext` objects for common "
|
||
"purposes."
|
||
msgstr ""
|
||
"Une fonction utilitaire permettant de créer facilement des objets :class:"
|
||
"`SSLContext` pour des usages classiques."
|
||
|
||
#: ../Doc/library/ssl.rst:237
|
||
msgid ""
|
||
"Return a new :class:`SSLContext` object with default settings for the given "
|
||
"*purpose*. The settings are chosen by the :mod:`ssl` module, and usually "
|
||
"represent a higher security level than when calling the :class:`SSLContext` "
|
||
"constructor directly."
|
||
msgstr ""
|
||
"Renvoie un nouvel objet :class:`SSLContext`. Le paramètre *purpose* permet "
|
||
"de choisir parmi un ensemble de paramètres par défaut en fonction de l'usage "
|
||
"souhaité. Les paramètres sont choisis par le module :mod:`ssl` et "
|
||
"représentent généralement un niveau de sécurité supérieur à celui utilisé "
|
||
"lorsque vous appelez directement le constructeur :class:`SSLContext`."
|
||
|
||
#: ../Doc/library/ssl.rst:242
|
||
msgid ""
|
||
"*cafile*, *capath*, *cadata* represent optional CA certificates to trust for "
|
||
"certificate verification, as in :meth:`SSLContext.load_verify_locations`. "
|
||
"If all three are :const:`None`, this function can choose to trust the "
|
||
"system's default CA certificates instead."
|
||
msgstr ""
|
||
"*cafile*, *capath*, *cadata* représentent des certificats d'autorité de "
|
||
"certification facultatifs approuvés pour la vérification de certificats, "
|
||
"comme dans :meth:`SSLContext.load_verify_locations`. Si les trois sont à :"
|
||
"const:`None`, cette fonction peut choisir de faire confiance aux certificats "
|
||
"d'autorité de certification par défaut du système."
|
||
|
||
#: ../Doc/library/ssl.rst:248
|
||
msgid ""
|
||
"The settings are: :data:`PROTOCOL_SSLv23`, :data:`OP_NO_SSLv2`, and :data:"
|
||
"`OP_NO_SSLv3` with high encryption cipher suites without RC4 and without "
|
||
"unauthenticated cipher suites. Passing :data:`~Purpose.SERVER_AUTH` as "
|
||
"*purpose* sets :data:`~SSLContext.verify_mode` to :data:`CERT_REQUIRED` and "
|
||
"either loads CA certificates (when at least one of *cafile*, *capath* or "
|
||
"*cadata* is given) or uses :meth:`SSLContext.load_default_certs` to load "
|
||
"default CA certificates."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:257
|
||
msgid ""
|
||
"The protocol, options, cipher and other settings may change to more "
|
||
"restrictive values anytime without prior deprecation. The values represent "
|
||
"a fair balance between compatibility and security."
|
||
msgstr ""
|
||
"Le protocole, les options, l'algorithme de chiffrement et d'autres "
|
||
"paramètres peuvent changer pour des valeurs plus restrictives à tout moment "
|
||
"sans avertissement préalable. Les valeurs représentent un juste équilibre "
|
||
"entre compatibilité et sécurité."
|
||
|
||
#: ../Doc/library/ssl.rst:261
|
||
msgid ""
|
||
"If your application needs specific settings, you should create a :class:"
|
||
"`SSLContext` and apply the settings yourself."
|
||
msgstr ""
|
||
"Si votre application nécessite des paramètres spécifiques, vous devez créer "
|
||
"une classe :class:`SSLContext` et appliquer les paramètres vous-même."
|
||
|
||
#: ../Doc/library/ssl.rst:265
|
||
msgid ""
|
||
"If you find that when certain older clients or servers attempt to connect "
|
||
"with a :class:`SSLContext` created by this function that they get an error "
|
||
"stating \"Protocol or cipher suite mismatch\", it may be that they only "
|
||
"support SSL3.0 which this function excludes using the :data:`OP_NO_SSLv3`. "
|
||
"SSL3.0 is widely considered to be `completely broken <https://en.wikipedia."
|
||
"org/wiki/POODLE>`_. If you still wish to continue to use this function but "
|
||
"still allow SSL 3.0 connections you can re-enable them using::"
|
||
msgstr ""
|
||
"Si vous constatez que, lorsque certains clients ou serveurs plus anciens "
|
||
"tentent de se connecter avec une classe :class:`SSLContext` créée par cette "
|
||
"fonction, une erreur indiquant « *Protocol or cipher suite "
|
||
"mismatch* » (« Non concordance de protocole ou d'algorithme de "
|
||
"chiffrement ») est détectée, il se peut qu'ils ne prennent en charge que SSL "
|
||
"3.0 que cette fonction exclut en utilisant :data:`OP_NO_SSLv3`. SSL3.0 est "
|
||
"notoirement considéré comme `totalement déficient <https://fr.wikipedia.org/"
|
||
"wiki/POODLE>`_. Si vous souhaitez toujours continuer à utiliser cette "
|
||
"fonction tout en autorisant les connexions SSL 3.0, vous pouvez les "
|
||
"réactiver à l'aide de ::"
|
||
|
||
#: ../Doc/library/ssl.rst:281
|
||
msgid "RC4 was dropped from the default cipher string."
|
||
msgstr ""
|
||
"RC4 a été supprimé de la liste des algorithmes de chiffrement par défaut."
|
||
|
||
#: ../Doc/library/ssl.rst:285
|
||
msgid "ChaCha20/Poly1305 was added to the default cipher string."
|
||
msgstr ""
|
||
"*ChaCha20*/*Poly1305* a été ajouté à la liste des algorithmes de chiffrement "
|
||
"par défaut."
|
||
|
||
#: ../Doc/library/ssl.rst:287
|
||
msgid "3DES was dropped from the default cipher string."
|
||
msgstr ""
|
||
"*3DES* a été supprimé de la liste des algorithmes de chiffrement par défaut."
|
||
|
||
#: ../Doc/library/ssl.rst:291
|
||
msgid ""
|
||
"Specifies whether or not server certificates are verified when creating "
|
||
"client HTTPS connections without specifying a particular SSL context."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:294
|
||
msgid ""
|
||
"Starting with Python 2.7.9, :mod:`httplib` and modules which use it, such "
|
||
"as :mod:`urllib2` and :mod:`xmlrpclib`, default to verifying remote server "
|
||
"certificates received when establishing client HTTPS connections. This "
|
||
"default verification checks that the certificate is signed by a Certificate "
|
||
"Authority in the system trust store and that the Common Name (or Subject "
|
||
"Alternate Name) on the presented certificate matches the requested host."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:301
|
||
msgid ""
|
||
"Setting *enable* to :const:`True` ensures this default behaviour is in "
|
||
"effect."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:304
|
||
msgid ""
|
||
"Setting *enable* to :const:`False` reverts the default HTTPS certificate "
|
||
"handling to that of Python 2.7.8 and earlier, allowing connections to "
|
||
"servers using self-signed certificates, servers using certificates signed by "
|
||
"a Certicate Authority not present in the system trust store, and servers "
|
||
"where the hostname does not match the presented server certificate."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:310
|
||
msgid ""
|
||
"The leading underscore on this function denotes that it intentionally does "
|
||
"not exist in any implementation of Python 3 and may not be present in all "
|
||
"Python 2.7 implementations. The portable approach to bypassing certificate "
|
||
"checks or the system trust store when necessary is for tools to enable that "
|
||
"on a case-by-case basis by explicitly passing in a suitably configured SSL "
|
||
"context, rather than reverting the default behaviour of the standard library "
|
||
"client modules."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:322
|
||
msgid ""
|
||
"`CVE-2014-9365 <http://cve.mitre.org/cgi-bin/cvename.cgi?"
|
||
"name=CVE-2014-9365>`_ -- HTTPS man-in-the-middle attack against Python "
|
||
"clients using default settings"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:324
|
||
msgid ":pep:`476` -- Enabling certificate verification by default for HTTPS"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:325
|
||
msgid ":pep:`493` -- HTTPS verification migration tools for Python 2.7"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:329
|
||
msgid "Random generation"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:333
|
||
msgid ""
|
||
"OpenSSL has deprecated :func:`ssl.RAND_pseudo_bytes`, use :func:`ssl."
|
||
"RAND_bytes` instead."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:339
|
||
msgid ""
|
||
"Return ``True`` if the SSL pseudo-random number generator has been seeded "
|
||
"with 'enough' randomness, and ``False`` otherwise. You can use :func:`ssl."
|
||
"RAND_egd` and :func:`ssl.RAND_add` to increase the randomness of the pseudo-"
|
||
"random number generator."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:346
|
||
msgid ""
|
||
"If you are running an entropy-gathering daemon (EGD) somewhere, and *path* "
|
||
"is the pathname of a socket connection open to it, this will read 256 bytes "
|
||
"of randomness from the socket, and add it to the SSL pseudo-random number "
|
||
"generator to increase the security of generated secret keys. This is "
|
||
"typically only necessary on systems without better sources of randomness."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:352
|
||
msgid ""
|
||
"See http://egd.sourceforge.net/ or http://prngd.sourceforge.net/ for sources "
|
||
"of entropy-gathering daemons."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:355
|
||
msgid "Availability: not available with LibreSSL and OpenSSL > 1.1.0"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:359
|
||
msgid ""
|
||
"Mix the given *bytes* into the SSL pseudo-random number generator. The "
|
||
"parameter *entropy* (a float) is a lower bound on the entropy contained in "
|
||
"string (so you can always use :const:`0.0`). See :rfc:`1750` for more "
|
||
"information on sources of entropy."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:365
|
||
msgid "Certificate handling"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:369
|
||
msgid ""
|
||
"Verify that *cert* (in decoded format as returned by :meth:`SSLSocket."
|
||
"getpeercert`) matches the given *hostname*. The rules applied are those for "
|
||
"checking the identity of HTTPS servers as outlined in :rfc:`2818` and :rfc:"
|
||
"`6125`, except that IP addresses are not currently supported. In addition to "
|
||
"HTTPS, this function should be suitable for checking the identity of servers "
|
||
"in various SSL-based protocols such as FTPS, IMAPS, POPS and others."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:377
|
||
msgid ""
|
||
":exc:`CertificateError` is raised on failure. On success, the function "
|
||
"returns nothing::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:393
|
||
msgid ""
|
||
"Return the time in seconds since the Epoch, given the ``cert_time`` string "
|
||
"representing the \"notBefore\" or \"notAfter\" date from a certificate in ``"
|
||
"\"%b %d %H:%M:%S %Y %Z\"`` strptime format (C locale)."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:398
|
||
msgid "Here's an example:"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:410
|
||
msgid "\"notBefore\" or \"notAfter\" dates must use GMT (:rfc:`5280`)."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:412
|
||
msgid ""
|
||
"Interpret the input time as a time in UTC as specified by 'GMT' timezone in "
|
||
"the input string. Local timezone was used previously. Return an integer (no "
|
||
"fractions of a second in the input format)"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:420
|
||
msgid ""
|
||
"Given the address ``addr`` of an SSL-protected server, as a (*hostname*, "
|
||
"*port-number*) pair, fetches the server's certificate, and returns it as a "
|
||
"PEM-encoded string. If ``ssl_version`` is specified, uses that version of "
|
||
"the SSL protocol to attempt to connect to the server. If ``ca_certs`` is "
|
||
"specified, it should be a file containing a list of root certificates, the "
|
||
"same format as used for the same parameter in :func:`wrap_socket`. The call "
|
||
"will attempt to validate the server certificate against that set of root "
|
||
"certificates, and will fail if the validation attempt fails."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:431
|
||
msgid ""
|
||
"This function is now IPv6-compatible, and the default *ssl_version* is "
|
||
"changed from :data:`PROTOCOL_SSLv3` to :data:`PROTOCOL_SSLv23` for maximum "
|
||
"compatibility with modern servers."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:437
|
||
msgid ""
|
||
"Given a certificate as a DER-encoded blob of bytes, returns a PEM-encoded "
|
||
"string version of the same certificate."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:442
|
||
msgid ""
|
||
"Given a certificate as an ASCII PEM string, returns a DER-encoded sequence "
|
||
"of bytes for that same certificate."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:447
|
||
msgid ""
|
||
"Returns a named tuple with paths to OpenSSL's default cafile and capath. The "
|
||
"paths are the same as used by :meth:`SSLContext.set_default_verify_paths`. "
|
||
"The return value is a :term:`named tuple` ``DefaultVerifyPaths``:"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:452
|
||
msgid ""
|
||
":attr:`cafile` - resolved path to cafile or ``None`` if the file doesn't "
|
||
"exist,"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:453
|
||
msgid ""
|
||
":attr:`capath` - resolved path to capath or ``None`` if the directory "
|
||
"doesn't exist,"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:454
|
||
msgid ""
|
||
":attr:`openssl_cafile_env` - OpenSSL's environment key that points to a "
|
||
"cafile,"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:455
|
||
msgid ":attr:`openssl_cafile` - hard coded path to a cafile,"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:456
|
||
msgid ""
|
||
":attr:`openssl_capath_env` - OpenSSL's environment key that points to a "
|
||
"capath,"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:457
|
||
msgid ":attr:`openssl_capath` - hard coded path to a capath directory"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:459
|
||
msgid ""
|
||
"Availability: LibreSSL ignores the environment vars :attr:"
|
||
"`openssl_cafile_env` and :attr:`openssl_capath_env`"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:466
|
||
msgid ""
|
||
"Retrieve certificates from Windows' system cert store. *store_name* may be "
|
||
"one of ``CA``, ``ROOT`` or ``MY``. Windows may provide additional cert "
|
||
"stores, too."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:470
|
||
msgid ""
|
||
"The function returns a list of (cert_bytes, encoding_type, trust) tuples. "
|
||
"The encoding_type specifies the encoding of cert_bytes. It is either :const:"
|
||
"`x509_asn` for X.509 ASN.1 data or :const:`pkcs_7_asn` for PKCS#7 ASN.1 "
|
||
"data. Trust specifies the purpose of the certificate as a set of OIDS or "
|
||
"exactly ``True`` if the certificate is trustworthy for all purposes."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:477 ../Doc/library/ssl.rst:1308
|
||
msgid "Example::"
|
||
msgstr "Exemple ::"
|
||
|
||
#: ../Doc/library/ssl.rst:483 ../Doc/library/ssl.rst:498
|
||
msgid "Availability: Windows."
|
||
msgstr "Disponibilité : Windows."
|
||
|
||
#: ../Doc/library/ssl.rst:489
|
||
msgid ""
|
||
"Retrieve CRLs from Windows' system cert store. *store_name* may be one of "
|
||
"``CA``, ``ROOT`` or ``MY``. Windows may provide additional cert stores, too."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:493
|
||
msgid ""
|
||
"The function returns a list of (cert_bytes, encoding_type, trust) tuples. "
|
||
"The encoding_type specifies the encoding of cert_bytes. It is either :const:"
|
||
"`x509_asn` for X.509 ASN.1 data or :const:`pkcs_7_asn` for PKCS#7 ASN.1 data."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:504
|
||
msgid "Constants"
|
||
msgstr "Constantes"
|
||
|
||
#: ../Doc/library/ssl.rst:508
|
||
msgid ""
|
||
"Possible value for :attr:`SSLContext.verify_mode`, or the ``cert_reqs`` "
|
||
"parameter to :func:`wrap_socket`. In this mode (the default), no "
|
||
"certificates will be required from the other side of the socket connection. "
|
||
"If a certificate is received from the other end, no attempt to validate it "
|
||
"is made."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:514 ../Doc/library/ssl.rst:1606
|
||
msgid "See the discussion of :ref:`ssl-security` below."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:518
|
||
msgid ""
|
||
"Possible value for :attr:`SSLContext.verify_mode`, or the ``cert_reqs`` "
|
||
"parameter to :func:`wrap_socket`. In this mode no certificates will be "
|
||
"required from the other side of the socket connection; but if they are "
|
||
"provided, validation will be attempted and an :class:`SSLError` will be "
|
||
"raised on failure."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:524 ../Doc/library/ssl.rst:535
|
||
msgid ""
|
||
"Use of this setting requires a valid set of CA certificates to be passed, "
|
||
"either to :meth:`SSLContext.load_verify_locations` or as a value of the "
|
||
"``ca_certs`` parameter to :func:`wrap_socket`."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:530
|
||
msgid ""
|
||
"Possible value for :attr:`SSLContext.verify_mode`, or the ``cert_reqs`` "
|
||
"parameter to :func:`wrap_socket`. In this mode, certificates are required "
|
||
"from the other side of the socket connection; an :class:`SSLError` will be "
|
||
"raised if no certificate is provided, or if its validation fails."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:541
|
||
msgid ""
|
||
"Possible value for :attr:`SSLContext.verify_flags`. In this mode, "
|
||
"certificate revocation lists (CRLs) are not checked. By default OpenSSL does "
|
||
"neither require nor verify CRLs."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:549
|
||
msgid ""
|
||
"Possible value for :attr:`SSLContext.verify_flags`. In this mode, only the "
|
||
"peer cert is check but non of the intermediate CA certificates. The mode "
|
||
"requires a valid CRL that is signed by the peer cert's issuer (its direct "
|
||
"ancestor CA). If no proper has been loaded :attr:`SSLContext."
|
||
"load_verify_locations`, validation will fail."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:559
|
||
msgid ""
|
||
"Possible value for :attr:`SSLContext.verify_flags`. In this mode, CRLs of "
|
||
"all certificates in the peer cert chain are checked."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:566
|
||
msgid ""
|
||
"Possible value for :attr:`SSLContext.verify_flags` to disable workarounds "
|
||
"for broken X.509 certificates."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:573
|
||
msgid ""
|
||
"Possible value for :attr:`SSLContext.verify_flags`. It instructs OpenSSL to "
|
||
"prefer trusted certificates when building the trust chain to validate a "
|
||
"certificate. This flag is enabled by default."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:581
|
||
msgid ""
|
||
"Selects the highest protocol version that both the client and server "
|
||
"support. Despite the name, this option can select \"TLS\" protocols as well "
|
||
"as \"SSL\"."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:588
|
||
msgid "Alias for ``PROTOCOL_TLS``."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:590
|
||
msgid "Use ``PROTOCOL_TLS`` instead."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:594
|
||
msgid "Selects SSL version 2 as the channel encryption protocol."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:596
|
||
msgid ""
|
||
"This protocol is not available if OpenSSL is compiled with the "
|
||
"``OPENSSL_NO_SSL2`` flag."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:601
|
||
msgid "SSL version 2 is insecure. Its use is highly discouraged."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:603
|
||
msgid "OpenSSL has removed support for SSLv2."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:607
|
||
msgid "Selects SSL version 3 as the channel encryption protocol."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:609
|
||
msgid ""
|
||
"This protocol is not be available if OpenSSL is compiled with the "
|
||
"``OPENSSL_NO_SSLv3`` flag."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:614
|
||
msgid "SSL version 3 is insecure. Its use is highly discouraged."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:618 ../Doc/library/ssl.rst:627
|
||
#: ../Doc/library/ssl.rst:639 ../Doc/library/ssl.rst:652
|
||
msgid ""
|
||
"OpenSSL has deprecated all version specific protocols. Use the default "
|
||
"protocol with flags like ``OP_NO_SSLv3`` instead."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:623
|
||
msgid "Selects TLS version 1.0 as the channel encryption protocol."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:632
|
||
msgid ""
|
||
"Selects TLS version 1.1 as the channel encryption protocol. Available only "
|
||
"with openssl version 1.0.1+."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:644
|
||
msgid ""
|
||
"Selects TLS version 1.2 as the channel encryption protocol. This is the most "
|
||
"modern version, and probably the best choice for maximum protection, if both "
|
||
"sides can speak it. Available only with openssl version 1.0.1+."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:658
|
||
msgid ""
|
||
"Enables workarounds for various bugs present in other SSL implementations. "
|
||
"This option is set by default. It does not necessarily set the same flags "
|
||
"as OpenSSL's ``SSL_OP_ALL`` constant."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:666
|
||
msgid ""
|
||
"Prevents an SSLv2 connection. This option is only applicable in conjunction "
|
||
"with :const:`PROTOCOL_SSLv23`. It prevents the peers from choosing SSLv2 as "
|
||
"the protocol version."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:674
|
||
msgid ""
|
||
"Prevents an SSLv3 connection. This option is only applicable in conjunction "
|
||
"with :const:`PROTOCOL_SSLv23`. It prevents the peers from choosing SSLv3 as "
|
||
"the protocol version."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:682
|
||
msgid ""
|
||
"Prevents a TLSv1 connection. This option is only applicable in conjunction "
|
||
"with :const:`PROTOCOL_SSLv23`. It prevents the peers from choosing TLSv1 as "
|
||
"the protocol version."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:690
|
||
msgid ""
|
||
"Prevents a TLSv1.1 connection. This option is only applicable in conjunction "
|
||
"with :const:`PROTOCOL_SSLv23`. It prevents the peers from choosing TLSv1.1 "
|
||
"as the protocol version. Available only with openssl version 1.0.1+."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:698
|
||
msgid ""
|
||
"Prevents a TLSv1.2 connection. This option is only applicable in conjunction "
|
||
"with :const:`PROTOCOL_SSLv23`. It prevents the peers from choosing TLSv1.2 "
|
||
"as the protocol version. Available only with openssl version 1.0.1+."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:706
|
||
msgid ""
|
||
"Use the server's cipher ordering preference, rather than the client's. This "
|
||
"option has no effect on client sockets and SSLv2 server sockets."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:713
|
||
msgid ""
|
||
"Prevents re-use of the same DH key for distinct SSL sessions. This improves "
|
||
"forward secrecy but requires more computational resources. This option only "
|
||
"applies to server sockets."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:721
|
||
msgid ""
|
||
"Prevents re-use of the same ECDH key for distinct SSL sessions. This "
|
||
"improves forward secrecy but requires more computational resources. This "
|
||
"option only applies to server sockets."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:729
|
||
msgid ""
|
||
"Disable compression on the SSL channel. This is useful if the application "
|
||
"protocol supports its own compression scheme."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:732
|
||
msgid "This option is only available with OpenSSL 1.0.0 and later."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:738
|
||
msgid ""
|
||
"Whether the OpenSSL library has built-in support for the *Application-Layer "
|
||
"Protocol Negotiation* TLS extension as described in :rfc:`7301`."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:745
|
||
msgid ""
|
||
"Whether the OpenSSL library has built-in support for Elliptic Curve-based "
|
||
"Diffie-Hellman key exchange. This should be true unless the feature was "
|
||
"explicitly disabled by the distributor."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:753
|
||
msgid ""
|
||
"Whether the OpenSSL library has built-in support for the *Server Name "
|
||
"Indication* extension (as defined in :rfc:`4366`)."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:760
|
||
msgid ""
|
||
"Whether the OpenSSL library has built-in support for *Next Protocol "
|
||
"Negotiation* as described in the `NPN draft specification <https://tools."
|
||
"ietf.org/html/draft-agl-tls-nextprotoneg>`_. When true, you can use the :"
|
||
"meth:`SSLContext.set_npn_protocols` method to advertise which protocols you "
|
||
"want to support."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:770
|
||
msgid ""
|
||
"List of supported TLS channel binding types. Strings in this list can be "
|
||
"used as arguments to :meth:`SSLSocket.get_channel_binding`."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:777
|
||
msgid "The version string of the OpenSSL library loaded by the interpreter::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:786
|
||
msgid ""
|
||
"A tuple of five integers representing version information about the OpenSSL "
|
||
"library::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:796
|
||
msgid "The raw version number of the OpenSSL library, as a single integer::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:809
|
||
msgid ""
|
||
"Alert Descriptions from :rfc:`5246` and others. The `IANA TLS Alert Registry "
|
||
"<https://www.iana.org/assignments/tls-parameters/tls-parameters.xml#tls-"
|
||
"parameters-6>`_ contains this list and references to the RFCs where their "
|
||
"meaning is defined."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:813
|
||
msgid ""
|
||
"Used as the return value of the callback function in :meth:`SSLContext."
|
||
"set_servername_callback`."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:820
|
||
msgid ""
|
||
"Option for :func:`create_default_context` and :meth:`SSLContext."
|
||
"load_default_certs`. This value indicates that the context may be used to "
|
||
"authenticate Web servers (therefore, it will be used to create client-side "
|
||
"sockets)."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:829
|
||
msgid ""
|
||
"Option for :func:`create_default_context` and :meth:`SSLContext."
|
||
"load_default_certs`. This value indicates that the context may be used to "
|
||
"authenticate Web clients (therefore, it will be used to create server-side "
|
||
"sockets)."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:838
|
||
msgid "SSL Sockets"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:840
|
||
msgid "SSL sockets provide the following methods of :ref:`socket-objects`:"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:842
|
||
msgid ":meth:`~socket.socket.accept()`"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:843
|
||
msgid ":meth:`~socket.socket.bind()`"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:844
|
||
msgid ":meth:`~socket.socket.close()`"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:845
|
||
msgid ":meth:`~socket.socket.connect()`"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:846
|
||
msgid ":meth:`~socket.socket.fileno()`"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:847
|
||
msgid ""
|
||
":meth:`~socket.socket.getpeername()`, :meth:`~socket.socket.getsockname()`"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:848
|
||
msgid ""
|
||
":meth:`~socket.socket.getsockopt()`, :meth:`~socket.socket.setsockopt()`"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:849
|
||
msgid ""
|
||
":meth:`~socket.socket.gettimeout()`, :meth:`~socket.socket.settimeout()`, :"
|
||
"meth:`~socket.socket.setblocking()`"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:851
|
||
msgid ":meth:`~socket.socket.listen()`"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:852
|
||
msgid ":meth:`~socket.socket.makefile()`"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:853
|
||
msgid ""
|
||
":meth:`~socket.socket.recv()`, :meth:`~socket.socket.recv_into()` (but "
|
||
"passing a non-zero ``flags`` argument is not allowed)"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:855
|
||
msgid ""
|
||
":meth:`~socket.socket.send()`, :meth:`~socket.socket.sendall()` (with the "
|
||
"same limitation)"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:857
|
||
msgid ":meth:`~socket.socket.shutdown()`"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:859
|
||
msgid ""
|
||
"However, since the SSL (and TLS) protocol has its own framing atop of TCP, "
|
||
"the SSL sockets abstraction can, in certain respects, diverge from the "
|
||
"specification of normal, OS-level sockets. See especially the :ref:`notes "
|
||
"on non-blocking sockets <ssl-nonblocking>`."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:864
|
||
msgid "SSL sockets also have the following additional methods and attributes:"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:868
|
||
msgid "Perform the SSL setup handshake."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:872
|
||
msgid ""
|
||
"The handshake method also performs :func:`match_hostname` when the :attr:"
|
||
"`~SSLContext.check_hostname` attribute of the socket's :attr:`~SSLSocket."
|
||
"context` is true."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:878
|
||
msgid ""
|
||
"If there is no certificate for the peer on the other end of the connection, "
|
||
"return ``None``. If the SSL handshake hasn't been done yet, raise :exc:"
|
||
"`ValueError`."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:882
|
||
msgid ""
|
||
"If the ``binary_form`` parameter is :const:`False`, and a certificate was "
|
||
"received from the peer, this method returns a :class:`dict` instance. If "
|
||
"the certificate was not validated, the dict is empty. If the certificate "
|
||
"was validated, it returns a dict with several keys, amongst them ``subject`` "
|
||
"(the principal for which the certificate was issued) and ``issuer`` (the "
|
||
"principal issuing the certificate). If a certificate contains an instance "
|
||
"of the *Subject Alternative Name* extension (see :rfc:`3280`), there will "
|
||
"also be a ``subjectAltName`` key in the dictionary."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:891
|
||
msgid ""
|
||
"The ``subject`` and ``issuer`` fields are tuples containing the sequence of "
|
||
"relative distinguished names (RDNs) given in the certificate's data "
|
||
"structure for the respective fields, and each RDN is a sequence of name-"
|
||
"value pairs. Here is a real-world example::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:917
|
||
msgid ""
|
||
"To validate a certificate for a particular service, you can use the :func:"
|
||
"`match_hostname` function."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:920
|
||
msgid ""
|
||
"If the ``binary_form`` parameter is :const:`True`, and a certificate was "
|
||
"provided, this method returns the DER-encoded form of the entire certificate "
|
||
"as a sequence of bytes, or :const:`None` if the peer did not provide a "
|
||
"certificate. Whether the peer provides a certificate depends on the SSL "
|
||
"socket's role:"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:926
|
||
msgid ""
|
||
"for a client SSL socket, the server will always provide a certificate, "
|
||
"regardless of whether validation was required;"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:929
|
||
msgid ""
|
||
"for a server SSL socket, the client will only provide a certificate when "
|
||
"requested by the server; therefore :meth:`getpeercert` will return :const:"
|
||
"`None` if you used :const:`CERT_NONE` (rather than :const:`CERT_OPTIONAL` "
|
||
"or :const:`CERT_REQUIRED`)."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:934
|
||
msgid ""
|
||
"The returned dictionary includes additional items such as ``issuer`` and "
|
||
"``notBefore``. Additionall :exc:`ValueError` is raised when the handshake "
|
||
"isn't done. The returned dictionary includes additional X509v3 extension "
|
||
"items such as ``crlDistributionPoints``, ``caIssuers`` and ``OCSP`` URIs."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:942
|
||
msgid ""
|
||
"Returns a three-value tuple containing the name of the cipher being used, "
|
||
"the version of the SSL protocol that defines its use, and the number of "
|
||
"secret bits being used. If no connection has been established, returns "
|
||
"``None``."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:948
|
||
msgid ""
|
||
"Return the compression algorithm being used as a string, or ``None`` if the "
|
||
"connection isn't compressed."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:951
|
||
msgid ""
|
||
"If the higher-level protocol supports its own compression mechanism, you can "
|
||
"use :data:`OP_NO_COMPRESSION` to disable SSL-level compression."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:958
|
||
msgid ""
|
||
"Get channel binding data for current connection, as a bytes object. Returns "
|
||
"``None`` if not connected or the handshake has not been completed."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:961
|
||
msgid ""
|
||
"The *cb_type* parameter allow selection of the desired channel binding type. "
|
||
"Valid channel binding types are listed in the :data:`CHANNEL_BINDING_TYPES` "
|
||
"list. Currently only the 'tls-unique' channel binding, defined by :rfc:"
|
||
"`5929`, is supported. :exc:`ValueError` will be raised if an unsupported "
|
||
"channel binding type is requested."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:971
|
||
msgid ""
|
||
"Return the protocol that was selected during the TLS handshake. If :meth:"
|
||
"`SSLContext.set_alpn_protocols` was not called, if the other party does not "
|
||
"support ALPN, if this socket does not support any of the client's proposed "
|
||
"protocols, or if the handshake has not happened yet, ``None`` is returned."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:981
|
||
msgid ""
|
||
"Return the higher-level protocol that was selected during the TLS/SSL "
|
||
"handshake. If :meth:`SSLContext.set_npn_protocols` was not called, or if the "
|
||
"other party does not support NPN, or if the handshake has not yet happened, "
|
||
"this will return ``None``."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:990
|
||
msgid ""
|
||
"Performs the SSL shutdown handshake, which removes the TLS layer from the "
|
||
"underlying socket, and returns the underlying socket object. This can be "
|
||
"used to go from encrypted operation over a connection to unencrypted. The "
|
||
"returned socket should always be used for further communication with the "
|
||
"other side of the connection, rather than the original socket."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:998
|
||
msgid ""
|
||
"Return the actual SSL protocol version negotiated by the connection as a "
|
||
"string, or ``None`` is no secure connection is established. As of this "
|
||
"writing, possible return values include ``\"SSLv2\"``, ``\"SSLv3\"``, ``"
|
||
"\"TLSv1\"``, ``\"TLSv1.1\"`` and ``\"TLSv1.2\"``. Recent OpenSSL versions "
|
||
"may define more return values."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1008
|
||
msgid ""
|
||
"The :class:`SSLContext` object this SSL socket is tied to. If the SSL "
|
||
"socket was created using the top-level :func:`wrap_socket` function (rather "
|
||
"than :meth:`SSLContext.wrap_socket`), this is a custom context object "
|
||
"created for this SSL socket."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1017
|
||
msgid "SSL Contexts"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1021
|
||
msgid ""
|
||
"An SSL context holds various data longer-lived than single SSL connections, "
|
||
"such as SSL configuration options, certificate(s) and private key(s). It "
|
||
"also manages a cache of SSL sessions for server-side sockets, in order to "
|
||
"speed up repeated connections from the same clients."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1028
|
||
msgid ""
|
||
"Create a new SSL context. You must pass *protocol* which must be one of the "
|
||
"``PROTOCOL_*`` constants defined in this module. :data:`PROTOCOL_SSLv23` is "
|
||
"currently recommended for maximum interoperability."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1034
|
||
msgid ""
|
||
":func:`create_default_context` lets the :mod:`ssl` module choose security "
|
||
"settings for a given purpose."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1038
|
||
msgid ":class:`SSLContext` objects have the following methods and attributes:"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1042
|
||
msgid ""
|
||
"Get statistics about quantities of loaded X.509 certificates, count of X.509 "
|
||
"certificates flagged as CA certificates and certificate revocation lists as "
|
||
"dictionary."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1046
|
||
msgid "Example for a context with one CA cert and one other cert::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1054
|
||
msgid ""
|
||
"Load a private key and the corresponding certificate. The *certfile* string "
|
||
"must be the path to a single file in PEM format containing the certificate "
|
||
"as well as any number of CA certificates needed to establish the "
|
||
"certificate's authenticity. The *keyfile* string, if present, must point to "
|
||
"a file containing the private key in. Otherwise the private key will be "
|
||
"taken from *certfile* as well. See the discussion of :ref:`ssl-"
|
||
"certificates` for more information on how the certificate is stored in the "
|
||
"*certfile*."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1063
|
||
msgid ""
|
||
"The *password* argument may be a function to call to get the password for "
|
||
"decrypting the private key. It will only be called if the private key is "
|
||
"encrypted and a password is necessary. It will be called with no arguments, "
|
||
"and it should return a string, bytes, or bytearray. If the return value is "
|
||
"a string it will be encoded as UTF-8 before using it to decrypt the key. "
|
||
"Alternatively a string, bytes, or bytearray value may be supplied directly "
|
||
"as the *password* argument. It will be ignored if the private key is not "
|
||
"encrypted and no password is needed."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1072
|
||
msgid ""
|
||
"If the *password* argument is not specified and a password is required, "
|
||
"OpenSSL's built-in password prompting mechanism will be used to "
|
||
"interactively prompt the user for a password."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1076
|
||
msgid ""
|
||
"An :class:`SSLError` is raised if the private key doesn't match with the "
|
||
"certificate."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1081
|
||
msgid ""
|
||
"Load a set of default \"certification authority\" (CA) certificates from "
|
||
"default locations. On Windows it loads CA certs from the ``CA`` and ``ROOT`` "
|
||
"system stores. On other systems it calls :meth:`SSLContext."
|
||
"set_default_verify_paths`. In the future the method may load CA certificates "
|
||
"from other locations, too."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1087
|
||
msgid ""
|
||
"The *purpose* flag specifies what kind of CA certificates are loaded. The "
|
||
"default settings :data:`Purpose.SERVER_AUTH` loads certificates, that are "
|
||
"flagged and trusted for TLS web server authentication (client side "
|
||
"sockets). :data:`Purpose.CLIENT_AUTH` loads CA certificates for client "
|
||
"certificate verification on the server side."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1095
|
||
msgid ""
|
||
"Load a set of \"certification authority\" (CA) certificates used to validate "
|
||
"other peers' certificates when :data:`verify_mode` is other than :data:"
|
||
"`CERT_NONE`. At least one of *cafile* or *capath* must be specified."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1099
|
||
msgid ""
|
||
"This method can also load certification revocation lists (CRLs) in PEM or "
|
||
"DER format. In order to make use of CRLs, :attr:`SSLContext.verify_flags` "
|
||
"must be configured properly."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1103
|
||
msgid ""
|
||
"The *cafile* string, if present, is the path to a file of concatenated CA "
|
||
"certificates in PEM format. See the discussion of :ref:`ssl-certificates` "
|
||
"for more information about how to arrange the certificates in this file."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1108
|
||
msgid ""
|
||
"The *capath* string, if present, is the path to a directory containing "
|
||
"several CA certificates in PEM format, following an `OpenSSL specific layout "
|
||
"<https://www.openssl.org/docs/ssl/SSL_CTX_load_verify_locations.html>`_."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1113
|
||
msgid ""
|
||
"The *cadata* object, if present, is either an ASCII string of one or more "
|
||
"PEM-encoded certificates or a bytes-like object of DER-encoded certificates. "
|
||
"Like with *capath* extra lines around PEM-encoded certificates are ignored "
|
||
"but at least one certificate must be present."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1120
|
||
msgid ""
|
||
"Get a list of loaded \"certification authority\" (CA) certificates. If the "
|
||
"``binary_form`` parameter is :const:`False` each list entry is a dict like "
|
||
"the output of :meth:`SSLSocket.getpeercert`. Otherwise the method returns a "
|
||
"list of DER-encoded certificates. The returned list does not contain "
|
||
"certificates from *capath* unless a certificate was requested and loaded by "
|
||
"a SSL connection."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1129
|
||
msgid ""
|
||
"Load a set of default \"certification authority\" (CA) certificates from a "
|
||
"filesystem path defined when building the OpenSSL library. Unfortunately, "
|
||
"there's no easy way to know whether this method succeeds: no error is "
|
||
"returned if no certificates are to be found. When the OpenSSL library is "
|
||
"provided as part of the operating system, though, it is likely to be "
|
||
"configured properly."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1138
|
||
msgid ""
|
||
"Set the available ciphers for sockets created with this context. It should "
|
||
"be a string in the `OpenSSL cipher list format <https://www.openssl.org/docs/"
|
||
"apps/ciphers.html#CIPHER-LIST-FORMAT>`_. If no cipher can be selected "
|
||
"(because compile-time options or other configuration forbids use of all the "
|
||
"specified ciphers), an :class:`SSLError` will be raised."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1146
|
||
msgid ""
|
||
"when connected, the :meth:`SSLSocket.cipher` method of SSL sockets will give "
|
||
"the currently selected cipher."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1151
|
||
msgid ""
|
||
"Specify which protocols the socket should advertise during the SSL/TLS "
|
||
"handshake. It should be a list of ASCII strings, like ``['http/1.1', "
|
||
"'spdy/2']``, ordered by preference. The selection of a protocol will happen "
|
||
"during the handshake, and will play out according to :rfc:`7301`. After a "
|
||
"successful handshake, the :meth:`SSLSocket.selected_alpn_protocol` method "
|
||
"will return the agreed-upon protocol."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1158
|
||
msgid ""
|
||
"This method will raise :exc:`NotImplementedError` if :data:`HAS_ALPN` is "
|
||
"False."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1161
|
||
msgid ""
|
||
"OpenSSL 1.1.0+ will abort the handshake and raise :exc:`SSLError` when both "
|
||
"sides support ALPN but cannot agree on a protocol."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1168
|
||
msgid ""
|
||
"Specify which protocols the socket should advertise during the SSL/TLS "
|
||
"handshake. It should be a list of strings, like ``['http/1.1', 'spdy/2']``, "
|
||
"ordered by preference. The selection of a protocol will happen during the "
|
||
"handshake, and will play out according to the `NPN draft specification "
|
||
"<https://tools.ietf.org/html/draft-agl-tls-nextprotoneg>`_. After a "
|
||
"successful handshake, the :meth:`SSLSocket.selected_npn_protocol` method "
|
||
"will return the agreed-upon protocol."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1176
|
||
msgid ""
|
||
"This method will raise :exc:`NotImplementedError` if :data:`HAS_NPN` is "
|
||
"False."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1181
|
||
msgid ""
|
||
"Register a callback function that will be called after the TLS Client Hello "
|
||
"handshake message has been received by the SSL/TLS server when the TLS "
|
||
"client specifies a server name indication. The server name indication "
|
||
"mechanism is specified in :rfc:`6066` section 3 - Server Name Indication."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1186
|
||
msgid ""
|
||
"Only one callback can be set per ``SSLContext``. If *server_name_callback* "
|
||
"is ``None`` then the callback is disabled. Calling this function a "
|
||
"subsequent time will disable the previously registered callback."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1190
|
||
msgid ""
|
||
"The callback function, *server_name_callback*, will be called with three "
|
||
"arguments; the first being the :class:`ssl.SSLSocket`, the second is a "
|
||
"string that represents the server name that the client is intending to "
|
||
"communicate (or :const:`None` if the TLS Client Hello does not contain a "
|
||
"server name) and the third argument is the original :class:`SSLContext`. The "
|
||
"server name argument is the IDNA decoded server name."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1197
|
||
msgid ""
|
||
"A typical use of this callback is to change the :class:`ssl.SSLSocket`'s :"
|
||
"attr:`SSLSocket.context` attribute to a new object of type :class:"
|
||
"`SSLContext` representing a certificate chain that matches the server name."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1202
|
||
msgid ""
|
||
"Due to the early negotiation phase of the TLS connection, only limited "
|
||
"methods and attributes are usable like :meth:`SSLSocket."
|
||
"selected_alpn_protocol` and :attr:`SSLSocket.context`. :meth:`SSLSocket."
|
||
"getpeercert`, :meth:`SSLSocket.getpeercert`, :meth:`SSLSocket.cipher` and :"
|
||
"meth:`SSLSocket.compress` methods require that the TLS connection has "
|
||
"progressed beyond the TLS Client Hello and therefore will not contain return "
|
||
"meaningful values nor can they be called safely."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1210
|
||
msgid ""
|
||
"The *server_name_callback* function must return ``None`` to allow the TLS "
|
||
"negotiation to continue. If a TLS failure is required, a constant :const:"
|
||
"`ALERT_DESCRIPTION_* <ALERT_DESCRIPTION_INTERNAL_ERROR>` can be returned. "
|
||
"Other return values will result in a TLS fatal error with :const:"
|
||
"`ALERT_DESCRIPTION_INTERNAL_ERROR`."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1216
|
||
msgid ""
|
||
"If there is an IDNA decoding error on the server name, the TLS connection "
|
||
"will terminate with an :const:`ALERT_DESCRIPTION_INTERNAL_ERROR` fatal TLS "
|
||
"alert message to the client."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1220
|
||
msgid ""
|
||
"If an exception is raised from the *server_name_callback* function the TLS "
|
||
"connection will terminate with a fatal TLS alert message :const:"
|
||
"`ALERT_DESCRIPTION_HANDSHAKE_FAILURE`."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1224
|
||
msgid ""
|
||
"This method will raise :exc:`NotImplementedError` if the OpenSSL library had "
|
||
"OPENSSL_NO_TLSEXT defined when it was built."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1229
|
||
msgid ""
|
||
"Load the key generation parameters for Diffie-Helman (DH) key exchange. "
|
||
"Using DH key exchange improves forward secrecy at the expense of "
|
||
"computational resources (both on the server and on the client). The *dhfile* "
|
||
"parameter should be the path to a file containing DH parameters in PEM "
|
||
"format."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1235
|
||
msgid ""
|
||
"This setting doesn't apply to client sockets. You can also use the :data:"
|
||
"`OP_SINGLE_DH_USE` option to further improve security."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1240
|
||
msgid ""
|
||
"Set the curve name for Elliptic Curve-based Diffie-Hellman (ECDH) key "
|
||
"exchange. ECDH is significantly faster than regular DH while arguably as "
|
||
"secure. The *curve_name* parameter should be a string describing a well-"
|
||
"known elliptic curve, for example ``prime256v1`` for a widely supported "
|
||
"curve."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1246
|
||
msgid ""
|
||
"This setting doesn't apply to client sockets. You can also use the :data:"
|
||
"`OP_SINGLE_ECDH_USE` option to further improve security."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1249
|
||
msgid "This method is not available if :data:`HAS_ECDH` is ``False``."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1252
|
||
msgid ""
|
||
"`SSL/TLS & Perfect Forward Secrecy <http://vincent.bernat.im/en/blog/2011-"
|
||
"ssl-perfect-forward-secrecy.html>`_"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1253
|
||
msgid "Vincent Bernat."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1259
|
||
msgid ""
|
||
"Wrap an existing Python socket *sock* and return an :class:`SSLSocket` "
|
||
"object. *sock* must be a :data:`~socket.SOCK_STREAM` socket; other socket "
|
||
"types are unsupported."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1263
|
||
msgid ""
|
||
"The returned SSL socket is tied to the context, its settings and "
|
||
"certificates. The parameters *server_side*, *do_handshake_on_connect* and "
|
||
"*suppress_ragged_eofs* have the same meaning as in the top-level :func:"
|
||
"`wrap_socket` function."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1268
|
||
msgid ""
|
||
"On client connections, the optional parameter *server_hostname* specifies "
|
||
"the hostname of the service which we are connecting to. This allows a "
|
||
"single server to host multiple SSL-based services with distinct "
|
||
"certificates, quite similarly to HTTP virtual hosts. Specifying "
|
||
"*server_hostname* will raise a :exc:`ValueError` if *server_side* is true."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1274
|
||
msgid ""
|
||
"Always allow a server_hostname to be passed, even if OpenSSL does not have "
|
||
"SNI."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1280
|
||
msgid ""
|
||
"Get statistics about the SSL sessions created or managed by this context. A "
|
||
"dictionary is returned which maps the names of each `piece of information "
|
||
"<https://www.openssl.org/docs/ssl/SSL_CTX_sess_number.html>`_ to their "
|
||
"numeric values. For example, here is the total number of hits and misses in "
|
||
"the session cache since the context was created::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1292
|
||
msgid ""
|
||
"Returns a list of dicts with information of loaded CA certs. If the optional "
|
||
"argument is true, returns a DER-encoded copy of the CA certificate."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1297
|
||
msgid ""
|
||
"Certificates in a capath directory aren't loaded unless they have been used "
|
||
"at least once."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1302
|
||
msgid ""
|
||
"Wether to match the peer cert's hostname with :func:`match_hostname` in :"
|
||
"meth:`SSLSocket.do_handshake`. The context's :attr:`~SSLContext.verify_mode` "
|
||
"must be set to :data:`CERT_OPTIONAL` or :data:`CERT_REQUIRED`, and you must "
|
||
"pass *server_hostname* to :meth:`~SSLContext.wrap_socket` in order to match "
|
||
"the hostname."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1323
|
||
msgid "This features requires OpenSSL 0.9.8f or newer."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1327
|
||
msgid ""
|
||
"An integer representing the set of SSL options enabled on this context. The "
|
||
"default value is :data:`OP_ALL`, but you can specify other options such as :"
|
||
"data:`OP_NO_SSLv2` by ORing them together."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1332
|
||
msgid ""
|
||
"With versions of OpenSSL older than 0.9.8m, it is only possible to set "
|
||
"options, not to clear them. Attempting to clear an option (by resetting the "
|
||
"corresponding bits) will raise a ``ValueError``."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1338
|
||
msgid ""
|
||
"The protocol version chosen when constructing the context. This attribute "
|
||
"is read-only."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1343
|
||
msgid ""
|
||
"The flags for certificate verification operations. You can set flags like :"
|
||
"data:`VERIFY_CRL_CHECK_LEAF` by ORing them together. By default OpenSSL does "
|
||
"neither require nor verify certificate revocation lists (CRLs). Available "
|
||
"only with openssl version 0.9.8+."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1350
|
||
msgid ""
|
||
"Whether to try to verify other peers' certificates and how to behave if "
|
||
"verification fails. This attribute must be one of :data:`CERT_NONE`, :data:"
|
||
"`CERT_OPTIONAL` or :data:`CERT_REQUIRED`."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1362
|
||
msgid "Certificates"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1364
|
||
msgid ""
|
||
"Certificates in general are part of a public-key / private-key system. In "
|
||
"this system, each *principal*, (which may be a machine, or a person, or an "
|
||
"organization) is assigned a unique two-part encryption key. One part of the "
|
||
"key is public, and is called the *public key*; the other part is kept "
|
||
"secret, and is called the *private key*. The two parts are related, in that "
|
||
"if you encrypt a message with one of the parts, you can decrypt it with the "
|
||
"other part, and **only** with the other part."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1372
|
||
msgid ""
|
||
"A certificate contains information about two principals. It contains the "
|
||
"name of a *subject*, and the subject's public key. It also contains a "
|
||
"statement by a second principal, the *issuer*, that the subject is who he "
|
||
"claims to be, and that this is indeed the subject's public key. The "
|
||
"issuer's statement is signed with the issuer's private key, which only the "
|
||
"issuer knows. However, anyone can verify the issuer's statement by finding "
|
||
"the issuer's public key, decrypting the statement with it, and comparing it "
|
||
"to the other information in the certificate. The certificate also contains "
|
||
"information about the time period over which it is valid. This is expressed "
|
||
"as two fields, called \"notBefore\" and \"notAfter\"."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1382
|
||
msgid ""
|
||
"In the Python use of certificates, a client or server can use a certificate "
|
||
"to prove who they are. The other side of a network connection can also be "
|
||
"required to produce a certificate, and that certificate can be validated to "
|
||
"the satisfaction of the client or server that requires such validation. The "
|
||
"connection attempt can be set to raise an exception if the validation fails. "
|
||
"Validation is done automatically, by the underlying OpenSSL framework; the "
|
||
"application need not concern itself with its mechanics. But the application "
|
||
"does usually need to provide sets of certificates to allow this process to "
|
||
"take place."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1392
|
||
msgid ""
|
||
"Python uses files to contain certificates. They should be formatted as \"PEM"
|
||
"\" (see :rfc:`1422`), which is a base-64 encoded form wrapped with a header "
|
||
"line and a footer line::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1401
|
||
msgid "Certificate chains"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1403
|
||
msgid ""
|
||
"The Python files which contain certificates can contain a sequence of "
|
||
"certificates, sometimes called a *certificate chain*. This chain should "
|
||
"start with the specific certificate for the principal who \"is\" the client "
|
||
"or server, and then the certificate for the issuer of that certificate, and "
|
||
"then the certificate for the issuer of *that* certificate, and so on up the "
|
||
"chain till you get to a certificate which is *self-signed*, that is, a "
|
||
"certificate which has the same subject and issuer, sometimes called a *root "
|
||
"certificate*. The certificates should just be concatenated together in the "
|
||
"certificate file. For example, suppose we had a three certificate chain, "
|
||
"from our server certificate to the certificate of the certification "
|
||
"authority that signed our server certificate, to the root certificate of the "
|
||
"agency which issued the certification authority's certificate::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1427
|
||
msgid "CA certificates"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1429
|
||
msgid ""
|
||
"If you are going to require validation of the other side of the connection's "
|
||
"certificate, you need to provide a \"CA certs\" file, filled with the "
|
||
"certificate chains for each issuer you are willing to trust. Again, this "
|
||
"file just contains these chains concatenated together. For validation, "
|
||
"Python will use the first chain it finds in the file which matches. The "
|
||
"platform's certificates file can be used by calling :meth:`SSLContext."
|
||
"load_default_certs`, this is done automatically with :func:`."
|
||
"create_default_context`."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1438
|
||
msgid "Combined key and certificate"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1440
|
||
msgid ""
|
||
"Often the private key is stored in the same file as the certificate; in this "
|
||
"case, only the ``certfile`` parameter to :meth:`SSLContext.load_cert_chain` "
|
||
"and :func:`wrap_socket` needs to be passed. If the private key is stored "
|
||
"with the certificate, it should come before the first certificate in the "
|
||
"certificate chain::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1454
|
||
msgid "Self-signed certificates"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1456
|
||
msgid ""
|
||
"If you are going to create a server that provides SSL-encrypted connection "
|
||
"services, you will need to acquire a certificate for that service. There "
|
||
"are many ways of acquiring appropriate certificates, such as buying one from "
|
||
"a certification authority. Another common practice is to generate a self-"
|
||
"signed certificate. The simplest way to do this is with the OpenSSL "
|
||
"package, using something like the following::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1485
|
||
msgid ""
|
||
"The disadvantage of a self-signed certificate is that it is its own root "
|
||
"certificate, and no one else will have it in their cache of known (and "
|
||
"trusted) root certificates."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1491
|
||
msgid "Examples"
|
||
msgstr "Exemples"
|
||
|
||
#: ../Doc/library/ssl.rst:1494
|
||
msgid "Testing for SSL support"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1496
|
||
msgid ""
|
||
"To test for the presence of SSL support in a Python installation, user code "
|
||
"should use the following idiom::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1507
|
||
msgid "Client-side operation"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1509
|
||
msgid ""
|
||
"This example creates a SSL context with the recommended security settings "
|
||
"for client sockets, including automatic certificate verification::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1514
|
||
msgid ""
|
||
"If you prefer to tune security settings yourself, you might create a context "
|
||
"from scratch (but beware that you might not get the settings right)::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1523
|
||
msgid ""
|
||
"(this snippet assumes your operating system places a bundle of all CA "
|
||
"certificates in ``/etc/ssl/certs/ca-bundle.crt``; if not, you'll get an "
|
||
"error and have to adjust the location)"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1527
|
||
msgid ""
|
||
"When you use the context to connect to a server, :const:`CERT_REQUIRED` "
|
||
"validates the server certificate: it ensures that the server certificate was "
|
||
"signed with one of the CA certificates, and checks the signature for "
|
||
"correctness::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1536
|
||
msgid "You may then fetch the certificate::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1540
|
||
msgid ""
|
||
"Visual inspection shows that the certificate does identify the desired "
|
||
"service (that is, the HTTPS host ``www.python.org``)::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1583
|
||
msgid ""
|
||
"Now the SSL channel is established and the certificate verified, you can "
|
||
"proceed to talk with the server::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1610
|
||
msgid "Server-side operation"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1612
|
||
msgid ""
|
||
"For server operation, typically you'll need to have a server certificate, "
|
||
"and private key, each in a file. You'll first create a context holding the "
|
||
"key and the certificate, so that clients can check your authenticity. Then "
|
||
"you'll open a socket, bind it to a port, call :meth:`listen` on it, and "
|
||
"start waiting for clients to connect::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1627
|
||
msgid ""
|
||
"When a client connects, you'll call :meth:`accept` on the socket to get the "
|
||
"new socket from the other end, and use the context's :meth:`SSLContext."
|
||
"wrap_socket` method to create a server-side SSL socket for the connection::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1640
|
||
msgid ""
|
||
"Then you'll read data from the ``connstream`` and do something with it till "
|
||
"you are finished with the client (or the client is finished with you)::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1654
|
||
msgid ""
|
||
"And go back to listening for new client connections (of course, a real "
|
||
"server would probably handle each client connection in a separate thread, or "
|
||
"put the sockets in non-blocking mode and use an event loop)."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1662
|
||
msgid "Notes on non-blocking sockets"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1664
|
||
msgid ""
|
||
"When working with non-blocking sockets, there are several things you need to "
|
||
"be aware of:"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1667
|
||
msgid ""
|
||
"Calling :func:`~select.select` tells you that the OS-level socket can be "
|
||
"read from (or written to), but it does not imply that there is sufficient "
|
||
"data at the upper SSL layer. For example, only part of an SSL frame might "
|
||
"have arrived. Therefore, you must be ready to handle :meth:`SSLSocket.recv` "
|
||
"and :meth:`SSLSocket.send` failures, and retry after another call to :func:"
|
||
"`~select.select`."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1674
|
||
msgid ""
|
||
"Conversely, since the SSL layer has its own framing, a SSL socket may still "
|
||
"have data available for reading without :func:`~select.select` being aware "
|
||
"of it. Therefore, you should first call :meth:`SSLSocket.recv` to drain any "
|
||
"potentially available data, and then only block on a :func:`~select.select` "
|
||
"call if still necessary."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1680
|
||
msgid ""
|
||
"(of course, similar provisions apply when using other primitives such as :"
|
||
"func:`~select.poll`, or those in the :mod:`selectors` module)"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1683
|
||
msgid ""
|
||
"The SSL handshake itself will be non-blocking: the :meth:`SSLSocket."
|
||
"do_handshake` method has to be retried until it returns successfully. Here "
|
||
"is a synopsis using :func:`~select.select` to wait for the socket's "
|
||
"readiness::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1701
|
||
msgid "Security considerations"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1704
|
||
msgid "Best defaults"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1706
|
||
msgid ""
|
||
"For **client use**, if you don't have any special requirements for your "
|
||
"security policy, it is highly recommended that you use the :func:"
|
||
"`create_default_context` function to create your SSL context. It will load "
|
||
"the system's trusted CA certificates, enable certificate validation and "
|
||
"hostname checking, and try to choose reasonably secure protocol and cipher "
|
||
"settings."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1713
|
||
msgid ""
|
||
"If a client certificate is needed for the connection, it can be added with :"
|
||
"meth:`SSLContext.load_cert_chain`."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1716
|
||
msgid ""
|
||
"By contrast, if you create the SSL context by calling the :class:"
|
||
"`SSLContext` constructor yourself, it will not have certificate validation "
|
||
"nor hostname checking enabled by default. If you do so, please read the "
|
||
"paragraphs below to achieve a good security level."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1722
|
||
msgid "Manual settings"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1725
|
||
msgid "Verifying certificates"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1727
|
||
msgid ""
|
||
"When calling the :class:`SSLContext` constructor directly, :const:"
|
||
"`CERT_NONE` is the default. Since it does not authenticate the other peer, "
|
||
"it can be insecure, especially in client mode where most of time you would "
|
||
"like to ensure the authenticity of the server you're talking to. Therefore, "
|
||
"when in client mode, it is highly recommended to use :const:"
|
||
"`CERT_REQUIRED`. However, it is in itself not sufficient; you also have to "
|
||
"check that the server certificate, which can be obtained by calling :meth:"
|
||
"`SSLSocket.getpeercert`, matches the desired service. For many protocols "
|
||
"and applications, the service can be identified by the hostname; in this "
|
||
"case, the :func:`match_hostname` function can be used. This common check is "
|
||
"automatically performed when :attr:`SSLContext.check_hostname` is enabled."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1740
|
||
msgid ""
|
||
"In server mode, if you want to authenticate your clients using the SSL layer "
|
||
"(rather than using a higher-level authentication mechanism), you'll also "
|
||
"have to specify :const:`CERT_REQUIRED` and similarly check the client "
|
||
"certificate."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1746
|
||
msgid ""
|
||
"In client mode, :const:`CERT_OPTIONAL` and :const:`CERT_REQUIRED` are "
|
||
"equivalent unless anonymous ciphers are enabled (they are disabled by "
|
||
"default)."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1751
|
||
msgid "Protocol versions"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1753
|
||
msgid ""
|
||
"SSL versions 2 and 3 are considered insecure and are therefore dangerous to "
|
||
"use. If you want maximum compatibility between clients and servers, it is "
|
||
"recommended to use :const:`PROTOCOL_SSLv23` as the protocol version and then "
|
||
"disable SSLv2 and SSLv3 explicitly using the :data:`SSLContext.options` "
|
||
"attribute::"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1763
|
||
msgid ""
|
||
"The SSL context created above will only allow TLSv1 and later (if supported "
|
||
"by your system) connections."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1767
|
||
msgid "Cipher selection"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1769
|
||
msgid ""
|
||
"If you have advanced security requirements, fine-tuning of the ciphers "
|
||
"enabled when negotiating a SSL session is possible through the :meth:"
|
||
"`SSLContext.set_ciphers` method. Starting from Python 2.7.9, the ssl module "
|
||
"disables certain weak ciphers by default, but you may want to further "
|
||
"restrict the cipher choice. Be sure to read OpenSSL's documentation about "
|
||
"the `cipher list format <https://www.openssl.org/docs/apps/ciphers."
|
||
"html#CIPHER-LIST-FORMAT>`_. If you want to check which ciphers are enabled "
|
||
"by a given cipher list, use the ``openssl ciphers`` command on your system."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1779
|
||
msgid "Multi-processing"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1781
|
||
msgid ""
|
||
"If using this module as part of a multi-processed application (using, for "
|
||
"example the :mod:`multiprocessing` or :mod:`concurrent.futures` modules), be "
|
||
"aware that OpenSSL's internal random number generator does not properly "
|
||
"handle forked processes. Applications must change the PRNG state of the "
|
||
"parent process if they use any SSL feature with :func:`os.fork`. Any "
|
||
"successful call of :func:`~ssl.RAND_add`, :func:`~ssl.RAND_bytes` or :func:"
|
||
"`~ssl.RAND_pseudo_bytes` is sufficient."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1793
|
||
msgid "Class :class:`socket.socket`"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1793
|
||
msgid "Documentation of underlying :mod:`socket` class"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1796
|
||
msgid ""
|
||
"`SSL/TLS Strong Encryption: An Introduction <https://httpd.apache.org/docs/"
|
||
"trunk/en/ssl/ssl_intro.html>`_"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1796
|
||
msgid "Intro from the Apache webserver documentation"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1799
|
||
msgid ""
|
||
"`RFC 1422: Privacy Enhancement for Internet Electronic Mail: Part II: "
|
||
"Certificate-Based Key Management <https://www.ietf.org/rfc/rfc1422>`_"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1799
|
||
msgid "Steve Kent"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1802
|
||
msgid ""
|
||
"`RFC 1750: Randomness Recommendations for Security <https://www.ietf.org/rfc/"
|
||
"rfc1750>`_"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1802
|
||
msgid "D. Eastlake et. al."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1805
|
||
msgid ""
|
||
"`RFC 3280: Internet X.509 Public Key Infrastructure Certificate and CRL "
|
||
"Profile <https://www.ietf.org/rfc/rfc3280>`_"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1805
|
||
msgid "Housley et. al."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1808
|
||
msgid ""
|
||
"`RFC 4366: Transport Layer Security (TLS) Extensions <https://www.ietf.org/"
|
||
"rfc/rfc4366>`_"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1808
|
||
msgid "Blake-Wilson et. al."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1811
|
||
msgid ""
|
||
"`RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2 <https://"
|
||
"tools.ietf.org/html/rfc5246>`_"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1811
|
||
msgid "T. Dierks et. al."
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1814
|
||
msgid ""
|
||
"`RFC 6066: Transport Layer Security (TLS) Extensions <https://tools.ietf.org/"
|
||
"html/rfc6066>`_"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1814
|
||
msgid "D. Eastlake"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1816
|
||
msgid ""
|
||
"`IANA TLS: Transport Layer Security (TLS) Parameters <https://www.iana.org/"
|
||
"assignments/tls-parameters/tls-parameters.xml>`_"
|
||
msgstr ""
|
||
|
||
#: ../Doc/library/ssl.rst:1817
|
||
msgid "IANA"
|
||
msgstr ""
|