[PYTHON-CRYPTO] httpslib.HTTPSConnection problem.

[Ng Pheng Siong]

On Wed, Jul 21, 2004 at 06:58:59PM +1000, Terry Kerr wrote:
> I have discovered that this problem is related to a work around
> implemented in openssl 0.9.6d and the work around can be switched on/off
> in openssl-0.9.6e and above.  To do this, I need to be able to
> SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS option in the ssl context of the
> socket created my HTTPSConnection.
>
> I don't see a way of doing this using the current API?  I think I
> essentially need access to the openssl methods SSL_set_options() or
> maybe SSL_CTX_set_options(). Does anyone know how I can set this context
> option from python?

M2Crypto.SSL.Context has method "set_options(self, op)". The option
SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS isn't in M2Crypto yet, so you'll have to
pass its actual integer value as the "op" parameter. To add the label to
M2Crypto, modify SWIG/_ssl.i.

I will add this to my code base. Public repository should be up RSN, which
should make keeping all this stuff updated easier.

Cheers.

--
Ng Pheng Siong <ngps at netmemetic.com>

http://firewall.rulemaker.net -+- Cisco PIX & Netscreen Config Version Control
http://sandbox.rulemaker.net/ngps -+- M2Crypto, ZServerSSL for Zope, Blog