[issue3596] Provide a way to disable SSLv2 (or better yet, disable by default)

Antoine Pitrou report at bugs.python.org
Tue Apr 20 22:40:51 CEST 2010


Antoine Pitrou <pitrou at free.fr> added the comment:

The new "ciphers" argument in trunk and py3k should do the trick, shouldn't it?
Do note that starting with OpenSSL 1.0.0, SSLv2 is disabled by default when using the "SSLv23" client method (you can re-enable it by specifying "ALL" for the cipher list).

----------
nosy: +pitrou
resolution:  -> out of date
status: open -> pending
versions: +Python 2.7, Python 3.2 -Python 2.6

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue3596>
_______________________________________


More information about the Python-bugs-list mailing list