]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
Issue 28043: SSLContext has improved default settings
authorChristian Heimes <christian@python.org>
Sat, 10 Sep 2016 20:43:48 +0000 (22:43 +0200)
committerChristian Heimes <christian@python.org>
Sat, 10 Sep 2016 20:43:48 +0000 (22:43 +0200)
commit358cfd426ccc0fcd6a7940d306602138e76420ae
treed57ee1b7dbe174fb49f35c4eac449e4404a96357
parent70360194c768efb0b26d524d5b94d4da963d632a
Issue 28043: SSLContext has improved default settings

The options OP_NO_COMPRESSION, OP_CIPHER_SERVER_PREFERENCE, OP_SINGLE_DH_USE, OP_SINGLE_ECDH_USE, OP_NO_SSLv2 (except for PROTOCOL_SSLv2), and OP_NO_SSLv3 (except for PROTOCOL_SSLv3) are set by default. The initial cipher suite list contains only HIGH ciphers, no NULL ciphers and MD5 ciphers (except for PROTOCOL_SSLv2).
Doc/library/ssl.rst
Lib/ssl.py
Lib/test/test_ssl.py
Misc/NEWS
Modules/_ssl.c