[New-bugs-announce] [issue32257] Support Disabling Renegotiation for SSLContext

Qichao Chu report at bugs.python.org
Sat Dec 9 01:38:23 EST 2017


New submission from Qichao Chu <qc.chu at gatech.edu>:

Adding a new method in SSLContext so that we can disable renegotiation easier.
This resolves CVE-2009-3555 and attack demoed by thc-ssl-dos

----------
assignee: christian.heimes
components: SSL
messages: 307879
nosy: christian.heimes, chuq
priority: normal
severity: normal
status: open
title: Support Disabling Renegotiation for SSLContext
type: enhancement
versions: Python 2.7

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue32257>
_______________________________________


More information about the New-bugs-announce mailing list