mirrors/github.com_openSUSE_osc
1
0
Fork 0
mirror of https://github.com/openSUSE/osc.git synced 2025-02-03 10:06:17 +01:00
Code

Set the SSL client cipher list to only use very strong algorithms.

Browse Source
This commit is contained in:
Cristian Rodríguez 2011-04-28 13:08:39 -03:00 committed by Adrian Schröter
parent c7e5819b7c
commit 931d216ea0
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
osc/oscssl.py
View File

@ -155,6 +155,7 @@ class mySSLContext(SSL.Context):
def __init__(self): def __init__(self):
SSL.Context.__init__(self, 'sslv23') SSL.Context.__init__(self, 'sslv23')
self.set_options(m2.SSL_OP_ALL | m2.SSL_OP_NO_SSLv2 | m2.SSL_OP_NO_SSLv3) self.set_options(m2.SSL_OP_ALL | m2.SSL_OP_NO_SSLv2 | m2.SSL_OP_NO_SSLv3)
self.set_cipher_list("HIGH:!eNULL:!aNULL:!EXPORT:!LOW:!MEDIUM:!FZA:!kRSA:!MD5:!RC4:!SSLv2:@STRENGTH")
self.set_session_cache_mode(m2.SSL_SESS_CACHE_CLIENT) self.set_session_cache_mode(m2.SSL_SESS_CACHE_CLIENT)
self.verrs = None self.verrs = None
#self.set_info_callback() # debug #self.set_info_callback() # debug