> as a further extension to issue #5639 (sni) and issue #8322 this patch
> provides the ability to set ciphers in the  SSLContext.wrap_socket and
> server_hostname in ssl.wrap_socket. This just makes all the ssl apis
> look the same. Restructured the documentation associated with these
> functions to all be around the wrap_socket method.

Ah! I actually don't want these APIs to look the same. In the long term,
I would like SSLContext to become the preferred API, with
ssl.wrap_socket only being supported for backwards compatibility.
The huge parameter list in ssl.wrap_socket() is really a mistake due to
it having evolved quite organically.