Skip to content

Add client support for python 3.5+#418

Open
xschlef wants to merge 2 commits into
Bcfg2:masterfrom
xschlef:patch-2
Open

Add client support for python 3.5+#418
xschlef wants to merge 2 commits into
Bcfg2:masterfrom
xschlef:patch-2

Conversation

@xschlef
Copy link
Copy Markdown
Contributor

@xschlef xschlef commented Nov 26, 2019

Starting with python 3.7 ssl.SSLSocket was removed. Simply calling wrap_socket is the proposed fix here.
Starting with python 3.5 ssl.PROTOCOL_TLSv1 was removed, so we switch to PROTOCOL_TLS, which should result in the highest possible TLS connection. Modern OSes do no longer support SSLv2/3 so it is okayish to ignore those.

This should fix #415

Starting with python 3.7 ssl.SSLSocket was removed. Simply calling wrap_socket is the proposed fix here.
Starting with python 3.5 ssl.PROTOCOL_TLSv1 was removed, so we switch to PROTOCOL_TLS, which should result in the highest possible TLS connection. Modern OSes do no longer support SSLv2/3 so it is okayish to ignore those.

This should fix Bcfg2#415
@solj
Copy link
Copy Markdown
Member

solj commented Dec 19, 2019

This looks good to me although we may want to consider moving this logic into Compat.py in order to fix the travis failures.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Python 3.7 support: SSLSocket.wrap_socket() was deprecated

2 participants