On 11 Jul 2016, at 20:22, Glyph Lefkowitz <glyph@twistedmatrix.com> wrote:

So pyOpenSSL/Cryptography doesn't have SSL_get_current_cipher anywhere?

get_current_cipher isn’t helpful. In particular, it puts us in an awkward place where we have a connection that has been negotiated for HTTP/2, but we cannot use it. The only action Twisted can meaningfully take at that point is to log and tear the connection down, which doesn’t really solve our problems.

We can do that, for sure, but it wouldn’t be much clearer than what happened here.