ssl2 2.0.1__tar.gz → 2.1.0__tar.gz

{ssl2-2.0.1 → ssl2-2.1.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: ssl2
-Version: 2.0.1
+Version: 2.1.0
 Summary: PEP 748 TLS interface: typed ClientHello model and parser, JA3, JA4 and Akamai fingerprints, proxies, sockets and asyncio streams
 Requires-Python: >=3.14
 Project-URL: Repository, https://github.com/baobien-dev/ssl2
@@ -175,7 +175,7 @@ async def main() -> None:
 asyncio.run(main())
 ```
 
-`context` is an engine's `ClientContext`. A peer that drops TCP without close_notify reads as `b""`, the same default the `ssl` module has. On a direct connection, and behind an HTTP or SOCKS proxy, both hand the TCP socket to the engine through `TLSBuffer.attach`, so records move between the kernel and the TLS state without a stop in Python; behind an HTTPS proxy, or over any other `AsyncTransport`, the records go through the buffer's memory BIOs instead. A socket timeout applies to every wait.
+`context` is an engine's `ClientContext`. `server_hostname=` names the server for SNI and certificate verification when the address is not that name, such as an IP address picked in advance. A peer that drops TCP without close_notify reads as `b""`, the same default the `ssl` module has. On a direct connection, and behind an HTTP or SOCKS proxy, both hand the TCP socket to the engine through `TLSBuffer.attach`, so records move between the kernel and the TLS state without a stop in Python; behind an HTTPS proxy, or over any other `AsyncTransport`, the records go through the buffer's memory BIOs instead. A socket timeout applies to every wait.
 
 ## Writing an engine
 

{ssl2-2.0.1 → ssl2-2.1.0}/README.md

@@ -167,7 +167,7 @@ async def main() -> None:
 asyncio.run(main())
 ```
 
-`context` is an engine's `ClientContext`. A peer that drops TCP without close_notify reads as `b""`, the same default the `ssl` module has. On a direct connection, and behind an HTTP or SOCKS proxy, both hand the TCP socket to the engine through `TLSBuffer.attach`, so records move between the kernel and the TLS state without a stop in Python; behind an HTTPS proxy, or over any other `AsyncTransport`, the records go through the buffer's memory BIOs instead. A socket timeout applies to every wait.
+`context` is an engine's `ClientContext`. `server_hostname=` names the server for SNI and certificate verification when the address is not that name, such as an IP address picked in advance. A peer that drops TCP without close_notify reads as `b""`, the same default the `ssl` module has. On a direct connection, and behind an HTTP or SOCKS proxy, both hand the TCP socket to the engine through `TLSBuffer.attach`, so records move between the kernel and the TLS state without a stop in Python; behind an HTTPS proxy, or over any other `AsyncTransport`, the records go through the buffer's memory BIOs instead. A socket timeout applies to every wait.
 
 ## Writing an engine
 

{ssl2-2.0.1 → ssl2-2.1.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "ssl2"
-version = "2.0.1"
+version = "2.1.0"
 description = "PEP 748 TLS interface: typed ClientHello model and parser, JA3, JA4 and Akamai fingerprints, proxies, sockets and asyncio streams"
 readme = "README.md"
 requires-python = ">=3.14"

{ssl2-2.0.1 → ssl2-2.1.0}/pyproject.toml.orig

@@ -1,6 +1,6 @@
 [project]
 name = "ssl2"
-version = "2.0.1"
+version = "2.1.0"
 description = "PEP 748 TLS interface: typed ClientHello model and parser, JA3, JA4 and Akamai fingerprints, proxies, sockets and asyncio streams"
 readme = "README.md"
 requires-python = ">=3.14"

{ssl2-2.0.1 → ssl2-2.1.0}/src/ssl2/asynchronous.py

@@ -110,13 +110,16 @@ class TLSStream:
         proxy: Proxy | None = None,
         timeout: float | None = None,
         proxy_context: ClientContext | None = None,
+        server_hostname: str | None = None,
     ) -> Self:
         async with asyncio.timeout(timeout):
             tunnel = await cls.tunnel(
                 context if proxy_context is None else proxy_context, address, proxy
             )
             try:
-                buffer = context.create_buffer(address[0])
+                buffer = context.create_buffer(
+                    address[0] if server_hostname is None else server_hostname
+                )
                 if tunnel.socket is not None and not tunnel.leftover:
                     return await cls.open_socket(context, buffer, tunnel.socket)
                 return await cls.open(

{ssl2-2.0.1 → ssl2-2.1.0}/src/ssl2/interface.py

@@ -197,8 +197,11 @@ class TLSSocket:
         proxy: Proxy | None = None,
         timeout: float | None = None,
         proxy_context: ClientContext | None = None,
+        server_hostname: str | None = None,
     ) -> Self:
-        buffer = context.create_buffer(address[0])
+        buffer = context.create_buffer(
+            address[0] if server_hostname is None else server_hostname
+        )
         if proxy is None:
             return cls.open_socket(
                 context, buffer, socket.create_connection(address, timeout=timeout)