[issue33062] ssl_renegotiate() doesn't seem to be exposed

Change by Fantix King : -- nosy: +fantix ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.

[issue33062] ssl_renegotiate() doesn't seem to be exposed

Change by Fantix King : -- keywords: +patch pull_requests: +8125 stage: -> patch review ___ Python tracker ___ ___ Python-bugs-list

[issue33062] ssl_renegotiate() doesn't seem to be exposed

Nathaniel Smith added the comment: > an OpenSSL cop-out Perhaps, but they've been doing it this way for a decade+, and we're living in a time when other libraries like BoringSSL are flat-out removing renegotiation support, so good luck convincing them to fix things. Anyway, it's nothing to do

[issue33062] ssl_renegotiate() doesn't seem to be exposed

Vitaly Kruglikov added the comment: > For extra fun, openssl itself doesn't fully support renegotiation on duplex > connections ... The necessitated modification to the application protocol on that thread sounds like an OpenSSL cop-out. There is no good reason that OpenSSL shouldn't be able

[issue33062] ssl_renegotiate() doesn't seem to be exposed

Nathaniel Smith added the comment: PyOpenSSL supports renegotiation, and I've used it for writing exactly this kind of test. Might be easier than wrapping a test harness around the 'openssl' command. For extra fun, openssl itself doesn't fully support renegotiation on duplex connections, eve

[issue33062] ssl_renegotiate() doesn't seem to be exposed

Martin Panter added the comment: I have also wanted to force renegotation for testing with Python. As a workaround, I have used the "openssl s_server" program, which I described at (use the lower-case "r" command). More recently I did a similar t

[issue33062] ssl_renegotiate() doesn't seem to be exposed

Christian Heimes added the comment: You can't. Rekeying is not available yet. SSL_key_update() is only available with OpenSSL 1.1.1 and TLS 1.3. Both are still in beta phase. -- ___ Python tracker _

[issue33062] ssl_renegotiate() doesn't seem to be exposed

Vitaly Kruglikov added the comment: > By the way, renegotiation is a problematic and has been replaced by rekeying > in TLS 1.3 How can I trigger rekeying via python ssl? Many thanks. -- ___ Python tracker

[issue33062] ssl_renegotiate() doesn't seem to be exposed

Christian Heimes added the comment: Since it's a feature request, I have changed the version number to 3.8. By the way, renegotiation is a problematic and has been replaced by rekeying in TLS 1.3. -- type: behavior -> enhancement versions: -Python 2.7, Python 3.4, Python 3.5, Python

[issue33062] ssl_renegotiate() doesn't seem to be exposed

New submission from Vitaly Kruglikov : I need to write a test for my client to make sure it's non-blocking ssl interactions are able to survive SSL renegotiation. However, I can't seem to find anything in our python ssl API that calls `SSL_renegotiate()` in order to force renegotiation. -