Address review: match existing wording, drop set_groups() example

Use the phrasing already used in this file for the five version notes,
as suggested by serhiy-storchaka.  Remove the set_groups() example and
post-quantum paragraph, which restate the OpenSSL documentation, and
drop the redundant claim that OpenSSL 3.5 offers hybrid groups by
default.

Author: fedonman

Doc/library/ssl.rst

@@ -230,8 +230,8 @@ Signature algorithms
    :meth:`SSLContext.set_client_sigalgs` and
    :meth:`SSLContext.set_server_sigalgs` methods.
 
-   This function requires OpenSSL 3.4 or later; it raises
-   :exc:`NotImplementedError` when linked against an older version.
+   This function will raise :exc:`NotImplementedError` if the OpenSSL library
+   is older than 3.4.
 
    .. versionadded:: 3.15
 
@@ -1318,8 +1318,8 @@ SSL sockets also have the following additional methods and attributes:
    Return the group used for doing key agreement on this connection. If no
    connection has been established, returns ``None``.
 
-   This method requires OpenSSL 3.2 or later; it raises
-   :exc:`NotImplementedError` when linked against an older version.
+   This method will raise :exc:`NotImplementedError` if the OpenSSL library
+   is older than 3.2.
 
    .. versionadded:: 3.15
 
@@ -1329,8 +1329,8 @@ SSL sockets also have the following additional methods and attributes:
    authentication on this connection, or ``None`` if no connection has been
    established or client authentication didn't occur.
 
-   This method requires OpenSSL 3.5 or later; it raises
-   :exc:`NotImplementedError` when linked against an older version.
+   This method will raise :exc:`NotImplementedError` if the OpenSSL library
+   is older than 3.5.
 
    .. versionadded:: 3.15
 
@@ -1340,8 +1340,8 @@ SSL sockets also have the following additional methods and attributes:
    handshake on this connection, or ``None`` if no connection has been
    established or the cipher suite has no signature.
 
-   This method requires OpenSSL 3.5 or later; it raises
-   :exc:`NotImplementedError` when linked against an older version.
+   This method will raise :exc:`NotImplementedError` if the OpenSSL library
+   is older than 3.5.
 
    .. versionadded:: 3.15
 
@@ -1719,8 +1719,8 @@ to speed up repeated connections from the same clients.
    :const:`True` this method will also return any associated aliases such as
    the ECDH curve names supported in older versions of OpenSSL.
 
-   This method requires OpenSSL 3.5 or later; it raises
-   :exc:`NotImplementedError` when linked against an older version.
+   This method will raise :exc:`NotImplementedError` if the OpenSSL library
+   is older than 3.5.
 
    .. versionadded:: 3.15
 
@@ -1769,19 +1769,6 @@ to speed up repeated connections from the same clients.
    context.  It should be a string in the `OpenSSL group list format
    <https://docs.openssl.org/master/man3/SSL_CTX_set1_groups_list/>`_.
 
-   This is a more general replacement for :meth:`~SSLContext.set_ecdh_curve`:
-   it accepts several groups in order of preference and supports finite-field
-   and post-quantum hybrid groups in addition to ECDH curves.  For example,
-   to prefer the post-quantum hybrid group ``X25519MLKEM768`` and fall back
-   to the classical ``X25519`` group::
-
-       >>> ctx = ssl.create_default_context()
-       >>> ctx.set_groups("X25519MLKEM768:X25519")  # doctest: +SKIP
-
-   Post-quantum hybrid groups such as ``X25519MLKEM768`` require OpenSSL 3.5
-   or later.  Requesting a group that the linked OpenSSL does not recognize
-   raises an :class:`SSLError`.
-
    .. note::
 
       When connected, the :meth:`SSLSocket.group` method of SSL sockets will
@@ -2966,9 +2953,9 @@ of TLS/SSL. Some new TLS 1.3 features are not yet available.
   negotiated cipher for both TLS 1.3 and earlier versions once a connection
   is established.
 - Key agreement can use post-quantum hybrid groups such as
-  ``X25519MLKEM768`` when linked against OpenSSL 3.5 or later, which offers
-  them by default.  Use :meth:`SSLContext.set_groups` to choose which groups
-  are offered and :meth:`SSLSocket.group` to see which one was negotiated.
+  ``X25519MLKEM768`` when linked against OpenSSL 3.5 or later.  Use
+  :meth:`SSLContext.set_groups` to choose which groups are offered and
+  :meth:`SSLSocket.group` to see which one was negotiated.
 - Session tickets are no longer sent as part of the initial handshake and
   are handled differently.  :attr:`SSLSocket.session` and :class:`SSLSession`
   are not compatible with TLS 1.3.