[WebUI] Security update for POODLE vulnerability
WebUI with HTTPS enabled is vulnerable to POODLE (CVE-2014-3566), so switch from SSLv3 to TLSv1.
This commit is contained in:
parent
bd2abb0127
commit
bdca70b330
|
@ -542,7 +542,7 @@ class ServerContextFactory:
|
|||
|
||||
def getContext(self): # NOQA
|
||||
"""Creates an SSL context."""
|
||||
ctx = SSL.Context(SSL.SSLv3_METHOD)
|
||||
ctx = SSL.Context(SSL.TLSv1_METHOD)
|
||||
deluge_web = component.get("DelugeWeb")
|
||||
log.debug("Enabling SSL using:")
|
||||
log.debug("Pkey: %s", deluge_web.pkey)
|
||||
|
|
Loading…
Reference in New Issue