]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[2.7] bpo-33570: TLS 1.3 ciphers for OpenSSL 1.1.1 (GH-6976) (GH-8760) (GH-10607)
authorstratakis <cstratak@redhat.com>
Fri, 15 Feb 2019 13:17:12 +0000 (14:17 +0100)
committerVictor Stinner <vstinner@redhat.com>
Fri, 15 Feb 2019 13:17:12 +0000 (14:17 +0100)
commitc49f63c1761ce03df7850b9e0b31a18c432dac64
treed0ae2fa232a81a69c71f1c2fbfe842d2c09c127a
parent826a8b708165796151ad4135b0ddbd79da6d39f1
[2.7] bpo-33570: TLS 1.3 ciphers for OpenSSL 1.1.1 (GH-6976) (GH-8760) (GH-10607)

Change TLS 1.3 cipher suite settings for compatibility with OpenSSL
1.1.1-pre6 and newer. OpenSSL 1.1.1 will have TLS 1.3 cipers enabled by
default.

Also update multissltests to test with latest OpenSSL.

Signed-off-by: Christian Heimes <christian@python.org>.
(cherry picked from commit 3e630c541b35c96bfe5619165255e559f577ee71)
Co-authored-by: Christian Heimes <christian@python.org>
Doc/library/ssl.rst
Lib/test/test_ssl.py
Misc/NEWS.d/next/Library/2018-05-18-21-50-47.bpo-33570.7CZy4t.rst [new file with mode: 0644]
Tools/ssl/multissltests.py