[New-bugs-announce] [issue20996] Backport TLS 1.1 and 1.2 support for ssl_version

[Donald Stufft]

New submission from Donald Stufft:

Python 3.4 has constants and code to enable forcing the ssl_version to TLS 1.1 or 1.2. As it stands now Python 2.7, 3.2, and 3.3 can successfully connect and will use a TLS 1.1 or 1.2 connection if it's available (new enough OpenSSL) but cannot _force_ a connection to use TLS 1.1 or 1.2.

It would be good to backport this from 3.4, it would involve adding constants to ssl.py, and minimal code to _ssl.c to handle actually forcing the TLS method.

----------
messages: 214241
nosy: alex, christian.heimes, dstufft, ncoghlan, pitrou
priority: normal
severity: normal
status: open
title: Backport TLS 1.1 and 1.2 support for ssl_version
versions: Python 2.7, Python 3.2, Python 3.3

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue20996>
_______________________________________