codex-storage/deluge
1
0
Fork 0
mirror of https://github.com/codex-storage/deluge.git synced 2025-02-17 05:47:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

[WebUI] Security update for POODLE vulnerability

Browse Source 
WebUI with HTTPS enabled is vulnerable to POODLE (CVE­-2014­-3566), so switch from
SSLv3 to TLSv1.
This commit is contained in:
Calum Lind 2014-10-15 18:44:02 +01:00
parent bd2abb0127
commit bdca70b330
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
deluge/ui/web/server.py
View File

@ -542,7 +542,7 @@ class ServerContextFactory:
def getContext(self): # NOQA def getContext(self): # NOQA
"""Creates an SSL context.""" """Creates an SSL context."""
ctx = SSL.Context(SSL.SSLv3_METHOD) ctx = SSL.Context(SSL.TLSv1_METHOD)
deluge_web = component.get("DelugeWeb") deluge_web = component.get("DelugeWeb")
log.debug("Enabling SSL using:") log.debug("Enabling SSL using:")
log.debug("Pkey: %s", deluge_web.pkey) log.debug("Pkey: %s", deluge_web.pkey)