diff options
| author | Liguros - Gitlab CI/CD [develop] <gitlab@liguros.net> | 2022-04-10 14:38:07 +0000 |
|---|---|---|
| committer | Liguros - Gitlab CI/CD [develop] <gitlab@liguros.net> | 2022-04-10 14:38:07 +0000 |
| commit | fd57488a76e3d4aed30d4cdfd48aa3ae30da84c7 (patch) | |
| tree | 5d42464c9b2451211597c8d252eef53d5255315d /dev-lang/python/files/ssl.patch | |
| parent | b1a709e20d65de4534cfec94250998850c052218 (diff) | |
| download | baldeagleos-repo-fd57488a76e3d4aed30d4cdfd48aa3ae30da84c7.tar.gz baldeagleos-repo-fd57488a76e3d4aed30d4cdfd48aa3ae30da84c7.tar.xz baldeagleos-repo-fd57488a76e3d4aed30d4cdfd48aa3ae30da84c7.zip | |
Adding metadata
Diffstat (limited to 'dev-lang/python/files/ssl.patch')
| -rw-r--r-- | dev-lang/python/files/ssl.patch | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/dev-lang/python/files/ssl.patch b/dev-lang/python/files/ssl.patch new file mode 100644 index 000000000000..485cd6f74dd2 --- /dev/null +++ b/dev-lang/python/files/ssl.patch @@ -0,0 +1,27 @@ +Neuter security level things until LibreSSL supports them. + +Index: Modules/_ssl.c +--- Modules/_ssl.c.orig ++++ Modules/_ssl.c +@@ -169,7 +169,7 @@ extern const SSL_METHOD *TLSv1_2_method(void); + * Based on Hynek's excellent blog post (update 2021-02-11) + * https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/ + */ +- #define PY_SSL_DEFAULT_CIPHER_STRING "@SECLEVEL=2:ECDH+AESGCM:ECDH+CHACHA20:ECDH+AES:DHE+AES:!aNULL:!eNULL:!aDSS:!SHA1:!AESCCM" ++ #define PY_SSL_DEFAULT_CIPHER_STRING "ECDH+AESGCM:ECDH+CHACHA20:ECDH+AES:DHE+AES:!aNULL:!eNULL:!aDSS:!SHA1:!AESCCM" + #ifndef PY_SSL_MIN_PROTOCOL + #define PY_SSL_MIN_PROTOCOL TLS1_2_VERSION + #endif +@@ -3567,6 +3567,12 @@ set_num_tickets(PySSLContext *self, PyObject *arg, voi + PyDoc_STRVAR(PySSLContext_num_tickets_doc, + "Control the number of TLSv1.3 session tickets"); + #endif /* TLS1_3_VERSION */ ++ ++int ++SSL_CTX_get_security_level(const SSL_CTX *ctx) ++{ ++ return 1; ++} + + static PyObject * + get_security_level(PySSLContext *self, void *c) |