[issue22866] ssl module in 2.7 should provide a way to configure default context options

[Marc-Andre Lemburg]

Marc-Andre Lemburg added the comment:

On 11.12.2014 20:42, Benjamin Peterson wrote:
> 
> Usually you can pass your own context.

Yes, in new code, but not in existing Python 2.7 code that wasn't
written for the newly added SSL context feature.

BTW: Having a way to change the SSL options globally would be useful
for Python 3.x as well, since OpenSSL often adds new options and
it's not unlikely we'll see an OP_NO_TLSv1 option soon, given its
age and similarity to SSLv3...
https://www.imperialviolet.org/2014/12/08/poodleagain.html
(the poodle strikes back ;-))

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue22866>
_______________________________________