aboutsummaryrefslogtreecommitdiff
path: root/debian/patches/06_do-not-make-SSLv3-mandatory.patch
blob: 0ce3f4aa8f2000b4127ae8846436972f2464a003 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
Description: Since SSL version 3 is insicure it is supported only if Python
 supports it. In Debian SSL version 3 is disabled in system Python since
 2.7.8-12.
Author: Daniele Tricoli <eriol@mornie.org>
Forwarded: https://github.com/shazow/urllib3/issues/487#issuecomment-63805742
Last/Update: 2014-11-20

--- a/urllib3/contrib/pyopenssl.py
+++ b/urllib3/contrib/pyopenssl.py
@@ -70,9 +70,14 @@
 # Map from urllib3 to PyOpenSSL compatible parameter-values.
 _openssl_versions = {
     ssl.PROTOCOL_SSLv23: OpenSSL.SSL.SSLv23_METHOD,
-    ssl.PROTOCOL_SSLv3: OpenSSL.SSL.SSLv3_METHOD,
     ssl.PROTOCOL_TLSv1: OpenSSL.SSL.TLSv1_METHOD,
 }
+
+try:
+    _openssl_versions.update({ssl.PROTOCOL_SSLv3: OpenSSL.SSL.SSLv3_METHOD})
+except AttributeError:
+    pass
+
 _openssl_verify = {
     ssl.CERT_NONE: OpenSSL.SSL.VERIFY_NONE,
     ssl.CERT_OPTIONAL: OpenSSL.SSL.VERIFY_PEER,