From 40382002f64e3ed932a597ab975c44eb3680ed4c Mon Sep 17 00:00:00 2001 From: Calum Lind Date: Thu, 20 Nov 2014 11:46:37 +0000 Subject: [PATCH] [#2555] [Core] Disable use of SSLv3 for DelugeRPC --- deluge/core/rpcserver.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/deluge/core/rpcserver.py b/deluge/core/rpcserver.py index 9dffd5318..3f607fc10 100644 --- a/deluge/core/rpcserver.py +++ b/deluge/core/rpcserver.py @@ -131,7 +131,8 @@ class ServerContextFactory(object): SSL transport. """ ssl_dir = deluge.configmanager.get_config_dir("ssl") - ctx = SSL.Context(SSL.SSLv3_METHOD) + ctx = SSL.Context(SSL.SSLv23_METHOD) + ctx.set_options(SSL.OP_NO_SSLv2 | SSL.OP_NO_SSLv3) ctx.use_certificate_file(os.path.join(ssl_dir, "daemon.cert")) ctx.use_privatekey_file(os.path.join(ssl_dir, "daemon.pkey")) return ctx