1 In-house patch to disable SSLv3 support. 

     2 (See also upstream bug #1395095)

     3 

     4 --- heat-2014.2.2/heat/openstack/common/sslutils.py.orig	2015-08-13 21:04:04.591411191 -0400

     5 +++ heat-2014.2.2/heat/openstack/common/sslutils.py	2015-08-13 20:32:57.198138070 -0400

     6 @@ -77,8 +77,7 @@

     7  

     8  _SSL_PROTOCOLS = {

     9      "tlsv1": ssl.PROTOCOL_TLSv1,

    10 -    "sslv23": ssl.PROTOCOL_SSLv23,

    11 -    "sslv3": ssl.PROTOCOL_SSLv3

    12 +    "sslv23": ssl.PROTOCOL_SSLv2

    13  }

    14  

    15  try:

    16 @@ -86,6 +85,11 @@

    17  except AttributeError:

    18      pass

    19  

    20 +try:

    21 +    _SSL_PROTOCOLS["sslv3"] = ssl.PROTOCOL_SSLv3

    22 +except AttributeError:

    23 +    pass

    24 +

    25  

    26  def validate_ssl_version(version):

    27      key = version.lower()