diff --git a/src/common/xmpp/transports_nb.py b/src/common/xmpp/transports_nb.py index f7ab85a56..601cb203c 100644 --- a/src/common/xmpp/transports_nb.py +++ b/src/common/xmpp/transports_nb.py @@ -758,8 +758,10 @@ class NonBlockingTLS(PlugIn): log.debug("_startSSL_pyOpenSSL called") tcpsock = self._owner.Connection # FIXME: should method be configurable? - tcpsock._sslContext = OpenSSL.SSL.Context(OpenSSL.SSL.TLSv1_METHOD) - #tcpsock._sslContext = OpenSSL.SSL.Context(OpenSSL.SSL.SSLv23_METHOD) + # Some gmail server don't support TLSv1, but only SSLv3, so use method + # that allow SSLv2, v3 and TLSv1 + #tcpsock._sslContext = OpenSSL.SSL.Context(OpenSSL.SSL.TLSv1_METHOD) + tcpsock._sslContext = OpenSSL.SSL.Context(OpenSSL.SSL.SSLv23_METHOD) tcpsock.ssl_errnum = 0 tcpsock._sslContext.set_verify(OpenSSL.SSL.VERIFY_PEER, self._ssl_verify_callback) cacerts = os.path.join(common.gajim.DATA_DIR, 'other', 'cacerts.pem')