Antoine Pitrou added the comment:
ssl.wrap_socket is pretty much a legacy API. It has too many parameters
already, and I don't really want to make it worse. The SSLContext API is
designed to be more palatable, even though it's a bit less compact.
(also, ssl.wrap_socket will implicitly create a
New submission from Michael Gubser:
One can only set the ECDH curve name via SSLContext.set_ecdh_curve().
ssl.wrap_socket() doesn't have a parameter to use it for the wrapping of the
basic socket. Therefore one always has to do the detour over SSLContext.
--
components: Library (Lib)
m