- Switch back to TLSv1 method
- Remove debug prints in stdlib ssl compatibility code
This commit is contained in:
		
							parent
							
								
									62350adb36
								
							
						
					
					
						commit
						35ecad1188
					
				
					 1 changed files with 4 additions and 4 deletions
				
			
		| 
						 | 
					@ -217,7 +217,7 @@ class StdlibSSLWrapper(SSLWrapper):
 | 
				
			||||||
		try:
 | 
							try:
 | 
				
			||||||
			return self.sslobj.read(bufsize)
 | 
								return self.sslobj.read(bufsize)
 | 
				
			||||||
		except socket.sslerror, e:
 | 
							except socket.sslerror, e:
 | 
				
			||||||
			log.debug("Recv: Caught socket.sslerror:", exc_info=True)
 | 
								#log.debug("Recv: Caught socket.sslerror:", exc_info=True)
 | 
				
			||||||
			#traceback.print_exc()
 | 
								#traceback.print_exc()
 | 
				
			||||||
			if e.args[0] not in (socket.SSL_ERROR_WANT_READ, socket.SSL_ERROR_WANT_WRITE):
 | 
								if e.args[0] not in (socket.SSL_ERROR_WANT_READ, socket.SSL_ERROR_WANT_WRITE):
 | 
				
			||||||
				raise SSLWrapper.Error(self.sock or self.sslobj, e)
 | 
									raise SSLWrapper.Error(self.sock or self.sslobj, e)
 | 
				
			||||||
| 
						 | 
					@ -228,7 +228,7 @@ class StdlibSSLWrapper(SSLWrapper):
 | 
				
			||||||
		try:
 | 
							try:
 | 
				
			||||||
			return self.sslobj.write(data)
 | 
								return self.sslobj.write(data)
 | 
				
			||||||
		except socket.sslerror, e:
 | 
							except socket.sslerror, e:
 | 
				
			||||||
			log.debug("Send: Caught socket.sslerror:", exc_info=True)
 | 
								#log.debug("Send: Caught socket.sslerror:", exc_info=True)
 | 
				
			||||||
			#traceback.print_exc()
 | 
								#traceback.print_exc()
 | 
				
			||||||
			if e.args[0] not in (socket.SSL_ERROR_WANT_READ, socket.SSL_ERROR_WANT_WRITE):
 | 
								if e.args[0] not in (socket.SSL_ERROR_WANT_READ, socket.SSL_ERROR_WANT_WRITE):
 | 
				
			||||||
				raise SSLWrapper.Error(self.sock or self.sslobj, e)
 | 
									raise SSLWrapper.Error(self.sock or self.sslobj, e)
 | 
				
			||||||
| 
						 | 
					@ -710,8 +710,8 @@ class NonBlockingTLS(PlugIn):
 | 
				
			||||||
		log.debug("_startSSL_pyOpenSSL called")
 | 
							log.debug("_startSSL_pyOpenSSL called")
 | 
				
			||||||
		tcpsock = self._owner.Connection
 | 
							tcpsock = self._owner.Connection
 | 
				
			||||||
		# FIXME: should method be configurable?
 | 
							# FIXME: should method be configurable?
 | 
				
			||||||
		#tcpsock._sslContext = OpenSSL.SSL.Context(OpenSSL.SSL.TLSv1_METHOD)
 | 
							tcpsock._sslContext = OpenSSL.SSL.Context(OpenSSL.SSL.TLSv1_METHOD)
 | 
				
			||||||
		tcpsock._sslContext = OpenSSL.SSL.Context(OpenSSL.SSL.SSLv23_METHOD)
 | 
							#tcpsock._sslContext = OpenSSL.SSL.Context(OpenSSL.SSL.SSLv23_METHOD)
 | 
				
			||||||
		tcpsock._sslContext.set_info_callback(self._ssl_info_callback)
 | 
							tcpsock._sslContext.set_info_callback(self._ssl_info_callback)
 | 
				
			||||||
		tcpsock._sslObj = OpenSSL.SSL.Connection(tcpsock._sslContext, tcpsock._sock)
 | 
							tcpsock._sslObj = OpenSSL.SSL.Connection(tcpsock._sslContext, tcpsock._sock)
 | 
				
			||||||
		tcpsock._sslObj.set_connect_state() # set to client mode
 | 
							tcpsock._sslObj.set_connect_state() # set to client mode
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Loading…
	
	Add table
		
		Reference in a new issue