Revision 91c69613 lib/http/__init__.py
| b/lib/http/__init__.py | ||
|---|---|---|
| 595 | 595 |
|
| 596 | 596 |
ctx = OpenSSL.SSL.Context(OpenSSL.SSL.SSLv23_METHOD) |
| 597 | 597 |
ctx.set_options(OpenSSL.SSL.OP_NO_SSLv2) |
| 598 |
ctx.set_cipher_list(constants.OPENSSL_CIPHERS) |
|
| 598 |
|
|
| 599 |
ciphers = self.GetSslCiphers() |
|
| 600 |
logging.debug("Setting SSL cipher string %s", ciphers)
|
|
| 601 |
ctx.set_cipher_list(ciphers) |
|
| 599 | 602 |
|
| 600 | 603 |
ctx.use_privatekey(self._ssl_key) |
| 601 | 604 |
ctx.use_certificate(self._ssl_cert) |
| ... | ... | |
| 608 | 611 |
|
| 609 | 612 |
return OpenSSL.SSL.Connection(ctx, sock) |
| 610 | 613 |
|
| 614 |
def GetSslCiphers(self): |
|
| 615 |
"""Returns the ciphers string for SSL. |
|
| 616 |
|
|
| 617 |
""" |
|
| 618 |
return constants.OPENSSL_CIPHERS |
|
| 619 |
|
|
| 611 | 620 |
def _SSLVerifyCallback(self, conn, cert, errnum, errdepth, ok): |
| 612 | 621 |
"""Verify the certificate provided by the peer |
| 613 | 622 |
|
Also available in: Unified diff