From bd3bc95e034e54bd74ff7d28ade1830b1f03d6d5 Mon Sep 17 00:00:00 2001 From: Guido van Rossum Date: Wed, 16 Oct 2013 08:35:41 -0700 Subject: Add OP_NO_SSLv2 to default SSLContext options. --- tulip/selector_events.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/tulip/selector_events.py b/tulip/selector_events.py index 40d7068..548c504 100644 --- a/tulip/selector_events.py +++ b/tulip/selector_events.py @@ -517,7 +517,10 @@ class _SelectorSslTransport(_SelectorTransport): sslcontext, ssl.SSLContext), 'Must pass an SSLContext' else: # Client-side may pass ssl=True to use a default context. - sslcontext = sslcontext or ssl.SSLContext(ssl.PROTOCOL_SSLv23) + # The default is the same as used by urllib. + if sslcontext is None: + sslcontext = ssl.SSLContext(ssl.PROTOCOL_SSLv23) + sslcontext.options |= ssl.OP_NO_SSLv2 wrap_kwargs = { 'server_side': server_side, 'do_handshake_on_connect': False, -- cgit v1.2.1