[ python-Feature Requests-854918 ] Configurable SSL handshake

[SourceForge.net]

Feature Requests item #854918, was opened at 2003-12-05 10:51
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=355470&aid=854918&group_id=5470

Category: Python Library
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Steve Jibson (toadstule)
Assigned to: Nobody/Anonymous (nobody)
Summary: Configurable SSL handshake

Initial Comment:
I am writing an application for which a (somewhat lame)
predefined standard requires that I "speak" to an HTTPS
server, and furthermore that the initial SSL handshake
be done with TLSv1.  Python's SSL support does the
handshake in SSLv2 or SSLv3 (even if TLSv1 is used
after the handshake).  My request is that the socket
library and httpslib would allow you to configure the
ssl handshaking.

The code which controls the handshake is in _ssl.c
(line 193 in the Python-2.3.2 source):

self->ctx = SSL_CTX_new(SSLv23_method()); /* Set up
context */

To make it work the way I need it to work, I can change
it to:

self->ctx = SSL_CTX_new(TLSv1_method()); /* Set up
context */

Hardcoding a different handshake isn't really the
answer.  It would be nice if this were configurable at
runtime.


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=355470&aid=854918&group_id=5470