Skip to content
Snippets Groups Projects
Commit e128ecae authored by Daniel's avatar Daniel
Browse files

FIX: Enforce necessary higher TLS versions.

This is to be compatible with current server defaults.
parent 6912364e
No related branches found
No related tags found
No related merge requests found
......@@ -164,7 +164,16 @@ class _DefaultCaosDBServerConnection(CaosDBServerConnection):
if "ssl_version" in config and config["cacert"] is not None:
ssl_version = getattr(ssl, config["ssl_version"])
else:
ssl_version = ssl.PROTOCOL_TLSv1
try:
ssl_version = ssl.PROTOCOL_TLS
except AttributeError:
# deprecated since Python 3.6, but necessary until there.
try:
ssl_version = ssl.PROTOCOL_TLSv1_2
except AttributeError:
print("It seems as if your Python version does not support current encryption"
"standards (such as TLS > 1.0), please upgrade to at least Python 3.4.")
sys.exit(1)
context = ssl.SSLContext(ssl_version)
context.verify_mode = ssl.CERT_REQUIRED
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment