GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Add ssl.HAS_PHA to detect libssl PHA support · Issue #128035 · python/cpython

Add ssl.HAS_PHA to detect libssl PHA support #128035

New issue
Copy link
New issue
Copy link
Closed
Closed
Add ssl.HAS_PHA to detect libssl PHA support#128035
Copy link
Labels
extension-modulesC modules in the Modules dirC modules in the Modules dirtopic-SSLtype-featureA feature request or enhancementA feature request or enhancement

Description

@WillChilds-Klein
WillChilds-Klein
opened on Dec 17, 2024
Issue body actions

Feature or enhancement

Proposal:

TLSv1.3 post-handshake client authentication (PHA), often referred to as "mutual TLS" or "mTLS", allows TLS servers to authenticate client identities using digital certificates. Some TLS libraries do not implement PHA, including actively maintained and widely used libraries such as AWS-LC and BoringSSL.

This issue proposes the addition of a boolean property ssl.HAS_PHA to indicate whether the crypto library CPython is built against supports PHA, allowing python's test suite and consuming modules to branch accordingly.

This feature has precedent in the ssl.HAS_PSK flag indicating support for another TLS feature that is not universally implemented across TLS libraries.

Has this already been discussed elsewhere?

This is a minor feature, which does not need previous discussion elsewhere

Links to previous discussion of this feature:

Related changes to increase libcrypto/libssl compatibility (specifically with AWS-LC) have been discussed with the community here.

Linked PRs

  • gh-128035: Add ssl.HAS_PHA to detect libssl PHA support #128036
Reacted by Gregory P. Smith

Activity

  1. WillChilds-Klein
    added
    type-featureA feature request or enhancementA feature request or enhancement
    on Dec 17, 2024
  2. picnixz
    added
    extension-modulesC modules in the Modules dirC modules in the Modules dir
    topic-SSL
    on Dec 17, 2024
  3. gpshead
    added a commit that references this issue on Dec 24, 2024

    gh-128035: Add ssl.HAS_PHA to detect libssl PHA support (GH-128036)

    418114c
  4. gpshead commented on Dec 24, 2024

    @gpshead
    gpshead
    on Dec 24, 2024
    Member
    More actions

    thanks, merged!

  5. gpshead
    closed this as completedon Dec 24, 2024
  6. srinivasreddy
    added a commit that references this issue on Jan 8, 2025

    pythongh-128035: Add ssl.HAS_PHA to detect libssl PHA support (python…

    8ad4e87
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    extension-modulesC modules in the Modules dirC modules in the Modules dirtopic-SSLtype-featureA feature request or enhancementA feature request or enhancement

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions

      You are visitor 01402503 — GeezerVison does not store the pages you look up.
      Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.