bpo-32257: [SSL] Support Disabling Renegotiation#4763
Conversation
Adding a new method in SSLContext so that we can disable renegotiation easier. This resolves CVE-2009-3555 and attack demonstrated by thc-ssl-dos
|
Hello, and thanks for your contribution! I'm a bot set up to make sure that the project can legally accept your contribution by verifying you have signed the PSF contributor agreement (CLA). Unfortunately our records indicate you have not signed the CLA. For legal reasons we need you to sign this before we can look at your contribution. Please follow the steps outlined in the CPython devguide to rectify this issue. Thanks again to your contribution and we look forward to looking at it! |
|
PR is probably not required. OpenSSL performs secure renegotiation by default https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set_options.html
|
Adding a new method in SSLContext so that we can disable renegotiation easier. This resolves CVE-2009-3555 and attack demonstrated by thc-ssl-dos
Disable SSL3 renegotiation to fix THC-SSL-DOS Issue.
|
Closing this PR as the underlying ticket has been marked as resolved and closed. |
6 participants
Adding a new method in SSLContext so that we can disable
renegotiation easier. This resolves CVE-2009-3555 and
attack demonstrated by thc-ssl-dos.
https://bugs.python.org/issue32257