René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Add support in SSL module for getting/setting TLS 1.3 cipher suites","articleBody":"# Add support in SSL module for getting/setting TLS 1.3 cipher suites\n\n### Proposal:\n\nThis feature proposal is a follow-on to issue #136306, adding the ability to control TLS 1.3 cipher suites. The existing Python SSLContext class has a method to set ciphers, but it is specifically documented that it can only be used to set cipher suites from TLS 1.2 and earlier. OpenSSL has added a different function for setting TLS 1.3 ciphers, and this feature would add a wrapper around that which looks like:\n\n```python\n    SSLContext.set_ciphersuites(ciphersuites: str) -\u003e None:\n        \"\"\"Set the TLS 1.3 cipher suites for sockets created with this context.\"\"\"\n```\n\nThis function mirrors `SSLContext.set_ciphers(ciphers: str)` which exists today for setting TLS 1.2 and earlier cipher suites. In addition, the existing `SSLSocket.cipher()` method can properly return the selected cipher after the TLS handshake has completed on a connection for both TLS 1.3 and earlier TLS versions, so no changes are required to that.\n\nThis feature will also update the documentation for `SSLContext.set_ciphers` and the section of the docs discussing TLS 1.3 support to reflect the new capability.\n\n### Links to previous discussion of this feature:\n\nThis was previously discussed in PR #136307, in the context of continuing to improve Python's TLS 1.3 support.\n\n\u003c!-- gh-linked-prs --\u003e\n### Linked PRs\n* gh-137198\n\u003c!-- /gh-linked-prs --\u003e\n","author":{"url":"https://github.com/ronf","@type":"Person","name":"ronf"},"datePublished":"2025-07-29T04:48:01.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/137197/cpython/issues/137197"}