Commit ffb6bcc5 authored by Yann Leboulanger's avatar Yann Leboulanger
Browse files

[fedor.brunner] Use only high encryption cipher suites and RC4 as least choice. Fixes #7

parent 9b5e73d3
......@@ -400,6 +400,7 @@ class NonBlockingTLS(PlugIn):
tcpsock.ssl_errnum = []
tcpsock._sslContext.set_verify(OpenSSL.SSL.VERIFY_PEER,
self._ssl_verify_callback)
tcpsock._sslContext.set_cipher_list('HIGH:!aNULL:!eNULL:RC4-SHA')
store = tcpsock._sslContext.get_cert_store()
self._load_cert_file(self.cacerts, store)
self._load_cert_file(self.mycerts, store)
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment