diff -r 3e7f88550788 Doc/whatsnew/2.7.rst --- a/Doc/whatsnew/2.7.rst Thu Aug 28 12:30:00 2014 -0400 +++ b/Doc/whatsnew/2.7.rst Sat Aug 30 00:06:12 2014 +1000 @@ -2554,7 +2554,6 @@ * upgraded to OpenSSL 1.0.1g for the prebuilt Windows installers published on python.org (contributed by Zachary Ware in :issue:`21462`) - :pep:`466` related features added in Python 2.7.8: * :func:`hashlib.pbkdf2_hmac` was backported from Python 3 to make a hashing @@ -2565,6 +2564,33 @@ on python.org (contributed by Zachary Ware in :issue:`21671` for CVE-2014-0224) +:pep:`466` related features added in Python 2.7.9: + +* the :mod:`ssl` module has been almost entirely synchronised with its + Python 3.4 counterpart, bringing TLSv1.x settings, SSLContext manipulation, + Server Name Indication, access to platform certificate stores, + standard library support for peer hostname validation and more + to the Python 2 series (backported by Alex Gaynor and David Reid + in :issue:`21308`). + + Refer to the "Version added: 2.7.9" notes in the module documentation for + specific details. Note that the ssl.RAND_* functions that provide access + to OpenSSL's random number generation capabilities have not been backported + - use :func:`os.urandom` instead + +* the change to :func:`os.urandom` to use a lazily-opened persistent file + descriptor so as to avoid using many file descriptors when run in parallel + from multiple threads was backported from Python 3 (backported by Alex + Gaynor in :issue:`21305`) + +* :data:`hashlib.algorithms_guaranteed` and + :data:`hashlib.algorithms_available` were backported from Python 3 to make + it easier for Python 2 applications to select the strongest available hash + algorithm (backported by Alex Gaynor in :issue:`21307`) + +* upgraded to OpenSSL 1.0.1i for the prebuilt Windows installers published + on python.org (contributed by Zachary Ware in :issue:`22160`) + .. ======================================================================