| author | John Beck <John.Beck@Oracle.COM> |
| Fri, 09 Jan 2015 08:38:55 -0800 | |
| changeset 3630 | c129597a9330 |
| permissions | -rw-r--r-- |
|
3630
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
1 |
This patch comes from in-house, and will not be passed upstream, since |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
2 |
Python 2.6 has been abandoned in favor of later versions. |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
3 |
|
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
4 |
--- Python-2.6.8/Modules/_ssl.c.~2~ 2014-12-16 00:06:40.398956147 -0800 |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
5 |
+++ Python-2.6.8/Modules/_ssl.c 2015-01-08 12:43:53.326916627 -0800 |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
6 |
@@ -269,6 +269,7 @@ |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
7 |
char *errstr = NULL; |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
8 |
int ret; |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
9 |
int verification_mode; |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
10 |
+ long options; |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
11 |
|
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
12 |
self = PyObject_New(PySSLObject, &PySSL_Type); /* Create new object */ |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
13 |
if (self == NULL) |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
14 |
@@ -359,8 +360,12 @@ |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
15 |
} |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
16 |
|
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
17 |
/* ssl compatibility */ |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
18 |
- SSL_CTX_set_options(self->ctx, |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
19 |
- SSL_OP_ALL & ~SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS); |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
20 |
+ options = SSL_OP_ALL & ~SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS; |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
21 |
+ if (proto_version != PY_SSL_VERSION_SSL2) |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
22 |
+ options |= SSL_OP_NO_SSLv2; |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
23 |
+ if (proto_version != PY_SSL_VERSION_SSL3) |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
24 |
+ options |= SSL_OP_NO_SSLv3; |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
25 |
+ SSL_CTX_set_options(self->ctx, options); |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
26 |
|
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
27 |
verification_mode = SSL_VERIFY_NONE; |
|
c129597a9330
20231116 problem in UTILITY/PYTHON
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
28 |
if (certreq == PY_SSL_CERT_OPTIONAL) |