From 3689eb508e6b43ed1585bba1bdf1f6580cf8657d Mon Sep 17 00:00:00 2001 From: Calum Lind Date: Thu, 20 Nov 2014 11:46:37 +0000 Subject: [PATCH] [#2555] [Core] Disable use of SSLv3 for DelugeRPC --- deluge/core/rpcserver.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/deluge/core/rpcserver.py b/deluge/core/rpcserver.py index 5ed1ab8da..5dee9dea6 100644 --- a/deluge/core/rpcserver.py +++ b/deluge/core/rpcserver.py @@ -97,7 +97,8 @@ class ServerContextFactory(object): SSL transport. """ ssl_dir = deluge.configmanager.get_config_dir("ssl") - ctx = SSL.Context(SSL.SSLv3_METHOD) + ctx = SSL.Context(SSL.SSLv23_METHOD) + ctx.set_options(SSL.OP_NO_SSLv2 | SSL.OP_NO_SSLv3) ctx.use_certificate_file(os.path.join(ssl_dir, "daemon.cert")) ctx.use_privatekey_file(os.path.join(ssl_dir, "daemon.pkey")) return ctx