Mercurial > public > mercurial-scm > hg-stable
diff mercurial/sslutil.py @ 19490:074bd02352c0 stable
sslutil: force SSLv3 on Python 2.6 and later (issue3905)
We can't (easily) force SSL version on older Pythons, but on 2.6 and
later we can force SSLv3, which is safer and widely supported. This
also appears to work around a bug in IIS detailed in issue 3905.
| author | Augie Fackler <raf@durin42.com> |
|---|---|
| date | Wed, 24 Jul 2013 14:51:13 -0400 |
| parents | 2d7fac049d3a |
| children | f2871c30e6a7 |
line wrap: on
line diff
--- a/mercurial/sslutil.py Wed Jul 24 14:45:29 2013 -0400 +++ b/mercurial/sslutil.py Wed Jul 24 14:51:13 2013 -0400 @@ -17,7 +17,8 @@ def ssl_wrap_socket(sock, keyfile, certfile, cert_reqs=ssl.CERT_NONE, ca_certs=None): sslsocket = ssl.wrap_socket(sock, keyfile, certfile, - cert_reqs=cert_reqs, ca_certs=ca_certs) + cert_reqs=cert_reqs, ca_certs=ca_certs, + ssl_version=ssl.PROTOCOL_SSLv3) # check if wrap_socket failed silently because socket had been closed # - see http://bugs.python.org/issue13721 if not sslsocket.cipher():