◐ Shell
clean mode source ↗

PEP 748: tlslib - configuration by Julien00859 · Pull Request #4958 · python/peps

added 4 commits

April 29, 2026 01:59
Ease reading the diff of the next commits.
Client-side `trust_store=None` means `TrustStore.system()` but
server-side it means "skip client authentication". One could think it
means "skip server authentication" when used client-side, so let's not
support `None` at all client-side and instead default to
`TrustStore.system()`.

@hugovk hugovk changed the title PEP748 tlslib - configuration PEP 748: tlslib - configuration

May 8, 2026

jvdprng

jvdprng

TLS 1.3 and secure TLS 1.2 both require a certificate and private key
server-side. Making the parameter mandatory makes it explicit that one
is required. It still is optional client-side.