[#2555] [Core] Disable use of SSLv3 for DelugeRPC

This commit is contained in:
Calum Lind 2014-11-20 11:46:37 +00:00
commit 40382002f6

View file

@ -131,7 +131,8 @@ class ServerContextFactory(object):
SSL transport. SSL transport.
""" """
ssl_dir = deluge.configmanager.get_config_dir("ssl") ssl_dir = deluge.configmanager.get_config_dir("ssl")
ctx = SSL.Context(SSL.SSLv3_METHOD) ctx = SSL.Context(SSL.SSLv23_METHOD)
ctx.set_options(SSL.OP_NO_SSLv2 | SSL.OP_NO_SSLv3)
ctx.use_certificate_file(os.path.join(ssl_dir, "daemon.cert")) ctx.use_certificate_file(os.path.join(ssl_dir, "daemon.cert"))
ctx.use_privatekey_file(os.path.join(ssl_dir, "daemon.pkey")) ctx.use_privatekey_file(os.path.join(ssl_dir, "daemon.pkey"))
return ctx return ctx