[issue22866] ssl module in 2.7.9 should provide a way to configure default context options

Marc-Andre Lemburg added the comment: Hmm, since neither create_default_context() nor _create_stdlib_context() are used by any other stdlib modules, I guess the removal of SSLv3 doesn't really make much difference for existing Python 2.7 applications. I was irritated by the function names impl

[issue22866] ssl module in 2.7.9 should provide a way to configure default context options

Marc-Andre Lemburg added the comment: On 14.11.2014 01:29, Benjamin Peterson wrote: > > But you can reenable SSLv3 by alerting the context and monkeypatching as > described in the PEP. Well, I can monkeypatch the ssl module of course, but that's not really the point here. I'm not talking about

[issue22866] ssl module in 2.7.9 should provide a way to configure default context options

Benjamin Peterson added the comment: But you can reenable SSLv3 by alerting the context and monkeypatching as described in the PEP. -- ___ Python tracker ___ ___

[issue22866] ssl module in 2.7.9 should provide a way to configure default context options

Marc-Andre Lemburg added the comment: On 13.11.2014 22:03, Benjamin Peterson wrote: > > Benjamin Peterson added the comment: > > Per http://legacy.python.org/dev/peps/pep-0476/#opting-out the only way to do > these things is horrednously ugly because it's hardly (if ever) a good idea. The poi

[issue22866] ssl module in 2.7.9 should provide a way to configure default context options

Benjamin Peterson added the comment: Per http://legacy.python.org/dev/peps/pep-0476/#opting-out the only way to do these things is horrednously ugly because it's hardly (if ever) a good idea. -- nosy: +alex, benjamin.peterson ___ Python tracker

[issue22866] ssl module in 2.7.9 should provide a way to configure default context options

R. David Murray added the comment: As I recall it, this was discussed extensively on the python-dev mailing list. Ideally someone should summarize that discussion here. -- nosy: +r.david.murray ___ Python tracker

[issue22866] ssl module in 2.7.9 should provide a way to configure default context options

New submission from Marc-Andre Lemburg: With the backport of the Python 3 ssl module, the default context options of the ssl module were changed. While this provides better security in many cases, it also causes breakage with servers or clients which do not support TLSv1 and later. The ssl mo