From cb37198a9d26aa89f4ad793453d533c9e29e38d4 Mon Sep 17 00:00:00 2001 From: Calum Lind Date: Thu, 20 Nov 2014 15:11:42 +0000 Subject: [PATCH] [WebUI] Modify SSL Context to allow >=TLSv1 protocol * The TLSv1_METHOD is a fixed protocol version so this change will allow higher versions to be used where possible. --- deluge/ui/web/server.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/deluge/ui/web/server.py b/deluge/ui/web/server.py index f99daa138..512e79a66 100644 --- a/deluge/ui/web/server.py +++ b/deluge/ui/web/server.py @@ -542,7 +542,8 @@ class ServerContextFactory: def getContext(self): # NOQA """Creates an SSL context.""" - ctx = SSL.Context(SSL.TLSv1_METHOD) + ctx = SSL.Context(SSL.SSLv23_METHOD) + ctx.set_options(SSL.OP_NO_SSLv2 | SSL.OP_NO_SSLv3) deluge_web = component.get("DelugeWeb") log.debug("Enabling SSL using:") log.debug("Pkey: %s", deluge_web.pkey)