diff scripts/oauth-get-token.py @ 7111:a7853002495c

Swap maximum_version for minumum_version in comment
author John Rouillard <rouilj@ieee.org>
date Thu, 08 Dec 2022 10:54:24 -0500
parents 0597120e0a74
children
line wrap: on
line diff
--- a/scripts/oauth-get-token.py	Thu Dec 08 09:50:16 2022 -0500
+++ b/scripts/oauth-get-token.py	Thu Dec 08 10:54:24 2022 -0500
@@ -156,9 +156,10 @@
             # compromised local host will still get the credentials.
             context = ssl.SSLContext(ssl_version=ssl.PROTOCOL_TLS_SERVER)
 
-            # This should not be needed. Uses Python 3.10+ setting.
-            # context.maximum_version = ssl.TLSVersion.TLSv1_2
-            # for previous versions maybe:
+            # This should not be needed as PROTOCOL_TLS_SERVER disables
+            # unsafe protocols. Uses Python 3.10+ setting ssl.TLSVersion....
+            # context.minimum_version = ssl.TLSVersion.TLSv1_2
+            # for previous Python versions 3.6+ maybe:
             #   ssl.PROTOCOL_TLSv1_2
             # would work?
 

Roundup Issue Tracker: http://roundup-tracker.org/