Benjamin Peterson
a0dd7dc1b0
remove rc4 from the default client ciphers ( closes #23481 )
2015-02-19 17:57:08 -05:00
Benjamin Peterson
b10bfbe036
pep 466 backport of alpn ( #20188 )
2015-01-23 16:35:37 -05:00
Victor Stinner
7c90667f74
Issue #21356 : Make ssl.RAND_egd() optional to support LibreSSL. The
...
availability of the function is checked during the compilation. Patch written
by Bernard Spil.
2015-01-06 13:53:37 +01:00
Benjamin Peterson
e3e7d40514
pep 476: verify certificates by default ( #22417 )
2014-11-23 21:02:02 -06:00
Benjamin Peterson
31aa69ead5
allow hostname to be passed to SSLContext even if OpenSSL doesn't support SNI ( closes #22921 )
...
Patch from Donald Stufft.
2014-11-23 20:13:31 -06:00
Benjamin Peterson
5f6b89bda3
initialize _makefile_refs earlier so things don't blow up when close() is called in the constructor
2014-11-23 11:16:48 -06:00
Antoine Pitrou
95b616480e
Backport disabling of SSLv3 in ssl._create_stdlib_context() (issue #22638 ).
...
The backport currently doesn't achieve anything since the function isn't used (yet).
2014-10-17 19:28:30 +02:00
Benjamin Peterson
0b30a2bd27
also use openssl envvars to find certs on windows ( closes #22449 )
...
Patch by Christian Heimes and Alex Gaynor.
2014-10-03 17:27:05 -04:00
Benjamin Peterson
2f33456e41
fix sslwrap_simple ( closes #22523 )
...
Thanks Alex Gaynor.
2014-10-01 23:53:01 -04:00
Alex Gaynor
e98205d798
Issue #20421 : Add a .version() method to SSL sockets exposing the actual protocol version in use.
...
Backport from default.
2014-09-04 13:33:22 -07:00
Benjamin Peterson
daeb925cc8
backport many ssl features from Python 3 ( closes #21308 )
...
A contribution of Alex Gaynor and David Reid with the generous support of
Rackspace. May God have mercy on their souls.
2014-08-20 14:14:50 -05:00
Antoine Pitrou
63cc99d9a6
Issue #19422 : Explicitly disallow non-SOCK_STREAM sockets in the ssl module, rather than silently let them emit clear text data.
2013-12-28 17:26:33 +01:00
Antoine Pitrou
f16ff7bc21
Issue #17918 : When using SSLSocket.accept(), if the SSL handshake failed on the new socket, the socket would linger indefinitely.
...
Thanks to Peter Saveliev for reporting.
2013-05-06 22:19:48 +02:00
Antoine Pitrou
40f12ab0c5
Backport Python 3.2 fix for issue #12065 , and add another test for SSLSocket.connect_ex().
2012-12-28 19:03:43 +01:00
Antoine Pitrou
d76088d972
Issue #13636 : Weak ciphers are now disabled by default in the ssl module
...
(except when SSLv2 is explicitly asked for).
2012-01-03 22:46:48 +01:00
Victor Stinner
b1241f9619
(Merge 3.1) Issue #12012 : ssl.PROTOCOL_SSLv2 becomes optional
...
OpenSSL is now compiled with OPENSSL_NO_SSL2 defined (without the SSLv2
protocol) on Debian: fix the ssl module on Debian Testing and Debian Sid.
Optimize also ssl.get_protocol_name(): speed does matter!
2011-05-10 01:52:03 +02:00
Antoine Pitrou
d3f6ea1d1e
Merged revisions 88664 via svnmerge from
...
svn+ssh://pythondev@svn.python.org/python/branches/py3k
........
r88664 | antoine.pitrou | 2011-02-27 00:24:06 +0100 (dim., 27 févr. 2011) | 4 lines
Issue #11326 : Add the missing connect_ex() implementation for SSL sockets,
and make it work for non-blocking connects.
........
2011-02-26 23:35:27 +00:00
Antoine Pitrou
f7f390a251
Issue #9729 : Fix the signature of SSLSocket.recvfrom() and
...
SSLSocket.sendto() to match the corresponding socket methods. Also,
fix various SSLSocket methods to raise socket.error rather than an
unhelpful TypeError when called on an unconnected socket. Original patch
by Andrew Bennetts.
NOTE: obviously, these methods are untested and unused in the real world...
2010-09-14 14:37:18 +00:00
Antoine Pitrou
4c7bcf1194
Issue #8086 : In :func:ssl.DER_cert_to_PEM_cert(), fix missing newline
...
before the certificate footer. Patch by Kyle VanderBeek.
2010-04-27 22:03:37 +00:00
Antoine Pitrou
278d665c6a
When calling getpeername() in SSLSocket.__init__, only silence exceptions
...
caused by the "socket not connected" condition.
2010-04-26 17:23:33 +00:00
Antoine Pitrou
fc69af1562
Issue #5103 : SSL handshake would ignore the socket timeout and block
...
indefinitely if the other end didn't respond.
2010-04-24 20:04:58 +00:00
Antoine Pitrou
b558f17b18
Issue #5238 : Calling makefile() on an SSL object would prevent the
...
underlying socket from being closed until all objects get truely destroyed.
2010-04-23 23:25:45 +00:00
Antoine Pitrou
dfb299bb95
Issue #7943 : Fix circular reference created when instantiating an SSL
...
socket. Initial patch by Péter Szabó.
2010-04-23 22:54:59 +00:00
Antoine Pitrou
0a6373c1a9
Issue #8322 : Add a *ciphers* argument to SSL sockets, so as to change the
...
available cipher list. Helps fix test_ssl with OpenSSL 1.0.0.
2010-04-17 17:10:38 +00:00
Antoine Pitrou
f9de534c21
Issue #8321 : Give access to OpenSSL version numbers from the ssl module,
...
using the new attributes `ssl.OPENSSL_VERSION`, `ssl.OPENSSL_VERSION_INFO`
and `ssl.OPENSSL_VERSION_NUMBER`.
2010-04-05 21:35:07 +00:00