equal
deleted
inserted
replaced
153 # SSLv2 and SSLv3 are broken. We ban them outright. |
153 # SSLv2 and SSLv3 are broken. We ban them outright. |
154 # WARNING: ctxoptions doesn't have an effect unless the modern ssl module |
154 # WARNING: ctxoptions doesn't have an effect unless the modern ssl module |
155 # is available. Be careful when adding flags! |
155 # is available. Be careful when adding flags! |
156 s['ctxoptions'] = OP_NO_SSLv2 | OP_NO_SSLv3 |
156 s['ctxoptions'] = OP_NO_SSLv2 | OP_NO_SSLv3 |
157 |
157 |
|
158 # Prevent CRIME. |
|
159 # There is no guarantee this attribute is defined on the module. |
|
160 s['ctxoptions'] |= getattr(ssl, 'OP_NO_COMPRESSION', 0) |
|
161 |
158 # Look for fingerprints in [hostsecurity] section. Value is a list |
162 # Look for fingerprints in [hostsecurity] section. Value is a list |
159 # of <alg>:<fingerprint> strings. |
163 # of <alg>:<fingerprint> strings. |
160 fingerprints = ui.configlist('hostsecurity', '%s:fingerprints' % hostname, |
164 fingerprints = ui.configlist('hostsecurity', '%s:fingerprints' % hostname, |
161 []) |
165 []) |
162 for fingerprint in fingerprints: |
166 for fingerprint in fingerprints: |