Urllib3-future

===================

* Emit ``InsecurePlatformWarning`` when SSLContext object is missing.
(Issue 558)

* Fix regression of duplicate header keys being discarded.
(Issue 563)

* ``Response.stream()`` returns a generator for chunked responses.
(Issue 560)

* Set upper-bound timeout when waiting for a socket in PyOpenSSL.
(Issue 585)

* Work on platforms without `ssl` module for plain HTTP requests.
(Issue 587)

* Stop relying on the stdlib's default cipher list. (Issue 588)

===================

* Fix file descriptor leakage on retries. (Issue 548)

* Removed RC4 from default cipher list. (Issue 551)

* Header performance improvements. (Issue 544)

* Fix PoolManager not obeying redirect retry settings. (Issue 553)

===================

* Pools can be used as context managers. (Issue 545)

* Don't re-use connections which experienced an SSLError. (Issue 529)

* Don't fail when gzip decoding an empty stream. (Issue 535)

* Add sha256 support for fingerprint verification. (Issue 540)

* Fixed handling of header values containing commas. (Issue 533)

=================

* Disabled SSLv3. (Issue 473)

* Add ``Url.url`` property to return the composed url string. (Issue 394)

* Fixed PyOpenSSL + gevent ``WantWriteError``. (Issue 412)

* ``MaxRetryError.reason`` will always be an exception, not string.
(Issue 481)

* Fixed SSL-related timeouts not being detected as timeouts. (Issue 492)

* Py3: Use ``ssl.create_default_context()`` when available. (Issue 473)

* Emit ``InsecureRequestWarning`` for *every* insecure HTTPS request.
(Issue 496)

* Emit ``SecurityWarning`` when certificate has no ``subjectAltName``.
(Issue 499)

* Close and discard sockets which experienced SSL-related errors.
(Issue 501)

* Handle ``body`` param in ``.request(...)``. (Issue 513)

* Respect timeout with HTTPS proxy. (Issue 505)

* PyOpenSSL: Handle ZeroReturnError exception. (Issue 520)

==================

* Apply socket arguments before binding. (Issue 427)

* More careful checks if fp-like object is closed. (Issue 435)

* Fixed packaging issues of some development-related files not
getting included. (Issue 440)

* Allow performing *only* fingerprint verification. (Issue 444)

* Emit ``SecurityWarning`` if system clock is waaay off. (Issue 445)

* Fixed PyOpenSSL compatibility with PyPy. (Issue 450)

* Fixed ``BrokenPipeError`` and ``ConnectionError`` handling in Py3.
(Issue 443)

================

* Shuffled around development-related files. If you're maintaining a distro
package of urllib3, you may need to tweak things. (Issue 415)

* Unverified HTTPS requests will trigger a warning on the first request. See
our new `security documentation
<https://urllib3.readthedocs.io/en/latest/security.html>`_ for details.
(Issue 426)

* New retry logic and ``urllib3.util.retry.Retry`` configuration object.
(Issue 326)

* All raised exceptions should now wrapped in a
``urllib3.exceptions.HTTPException``-extending exception. (Issue 326)

* All errors during a retry-enabled request should be wrapped in
``urllib3.exceptions.MaxRetryError``, including timeout-related exceptions
which were previously exempt. Underlying error is accessible from the
``.reason`` property. (Issue 326)

* ``urllib3.exceptions.ConnectionError`` renamed to
``urllib3.exceptions.ProtocolError``. (Issue 326)

* Errors during response read (such as IncompleteRead) are now wrapped in
``urllib3.exceptions.ProtocolError``. (Issue 418)

* Requesting an empty host will raise ``urllib3.exceptions.LocationValueError``.
(Issue 417)

* Catch read timeouts over SSL connections as
``urllib3.exceptions.ReadTimeoutError``. (Issue 419)

* Apply socket arguments before connecting. (Issue 427)