diff options
| author | Chris Wheeler <grintor@gmail.com> | 2021-11-26 17:03:44 -0500 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-11-26 22:03:44 +0000 |
| commit | 50eb1545374e980c7d96d0ce4ded341d3cbe4337 (patch) | |
| tree | 04a0a536bd7d6152b117ac220ea9f6f71a6ecf26 /websocket | |
| parent | 998c496343fc4fdeb8d2714034906e6d0dc6ba6e (diff) | |
| download | websocket-client-50eb1545374e980c7d96d0ce4ded341d3cbe4337.tar.gz | |
add support to pass custom ssl.SSLContext into sslopt param (#762)
Diffstat (limited to 'websocket')
| -rw-r--r-- | websocket/_http.py | 18 |
1 files changed, 9 insertions, 9 deletions
diff --git a/websocket/_http.py b/websocket/_http.py index 20ba6e8..603fa00 100644 --- a/websocket/_http.py +++ b/websocket/_http.py @@ -229,15 +229,15 @@ def _wrap_sni_socket(sock, sslopt, hostname, check_hostname): sslopt.get('password', None), ) - # Python 3.10 switch to PROTOCOL_TLS_CLIENT defaults to "cert_reqs = ssl.CERT_REQUIRED" and "check_hostname = True" - # If both disabled, set check_hostname before verify_mode - # see https://github.com/liris/websocket-client/commit/b96a2e8fa765753e82eea531adb19716b52ca3ca#commitcomment-10803153 - if sslopt.get('cert_reqs', ssl.CERT_NONE) == ssl.CERT_NONE and not sslopt.get('check_hostname', False): - context.check_hostname = False - context.verify_mode = ssl.CERT_NONE - else: - context.check_hostname = sslopt.get('check_hostname', True) - context.verify_mode = sslopt.get('cert_reqs', ssl.CERT_REQUIRED) + # Python 3.10 switch to PROTOCOL_TLS_CLIENT defaults to "cert_reqs = ssl.CERT_REQUIRED" and "check_hostname = True" + # If both disabled, set check_hostname before verify_mode + # see https://github.com/liris/websocket-client/commit/b96a2e8fa765753e82eea531adb19716b52ca3ca#commitcomment-10803153 + if sslopt.get('cert_reqs', ssl.CERT_NONE) == ssl.CERT_NONE and not sslopt.get('check_hostname', False): + context.check_hostname = False + context.verify_mode = ssl.CERT_NONE + else: + context.check_hostname = sslopt.get('check_hostname', True) + context.verify_mode = sslopt.get('cert_reqs', ssl.CERT_REQUIRED) if 'ciphers' in sslopt: context.set_ciphers(sslopt['ciphers']) |