diff roundup/scripts/roundup_server.py @ 6502:7fb13dc67a41

roundup-server native SSL support only TLS 1.2. 1.1 was suported but is deprecated.
author John Rouillard <rouilj@ieee.org>
date Thu, 30 Sep 2021 19:17:56 -0400
parents 1f2f7c0b8968
children a036712c96f4
line wrap: on
line diff
--- a/roundup/scripts/roundup_server.py	Mon Sep 06 18:08:14 2021 -0400
+++ b/roundup/scripts/roundup_server.py	Thu Sep 30 19:17:56 2021 -0400
@@ -120,7 +120,7 @@
     cert.get_issuer().O = 'Self-Signed'
     cert.set_pubkey(pkey)
     cert.sign(pkey, 'sha512')
-    ctx = SSL.Context(OpenSSL.SSL.TLSv1_1_METHOD)
+    ctx = SSL.Context(OpenSSL.SSL.TLSv1_2_METHOD)
     ctx.use_privatekey(pkey)
     ctx.use_certificate(cert)
 
@@ -133,7 +133,7 @@
         http_.server.HTTPServer.__init__(self, server_address, HandlerClass)
         self.socket = socket.socket(self.address_family, self.socket_type)
         if ssl_pem:
-            ctx = SSL.Context(SSL.TLSv1_1_METHOD)
+            ctx = SSL.Context(SSL.TLSv1_2_METHOD)
             ctx.use_privatekey_file(ssl_pem)
             ctx.use_certificate_file(ssl_pem)
         else:

Roundup Issue Tracker: http://roundup-tracker.org/