[#2555] [Core] Disable use of SSLv3 for DelugeRPC

2014-11-20 11:46:37 +00:00 · 2014-11-20 11:46:37 +00:00 · 3689eb508e
parent af95fb0828
commit 3689eb508e
1 changed files with 2 additions and 1 deletions
--- a/deluge/core/rpcserver.py
+++ b/deluge/core/rpcserver.py
@ -97,7 +97,8 @@ class ServerContextFactory(object):
        SSL transport.
        """
        ssl_dir = deluge.configmanager.get_config_dir("ssl")
-        ctx = SSL.Context(SSL.SSLv3_METHOD)
+        ctx = SSL.Context(SSL.SSLv23_METHOD)
+        ctx.set_options(SSL.OP_NO_SSLv2 | SSL.OP_NO_SSLv3)
        ctx.use_certificate_file(os.path.join(ssl_dir, "daemon.cert"))
        ctx.use_privatekey_file(os.path.join(ssl_dir, "daemon.pkey"))
        return ctx