Re: [Pythonmac-SIG] apple-Python and TLS 1.0

2017-01-12 Thread Kevin Ollivier
On Thu, Jan 12, 2017 at 6:10 AM, Jack Jansen wrote: > Ok, so this is a real problem:-( > > Again, I’m not deep enough into the SSL stuff to really understand this > (and specifically whether it needs a new openssl module, a new libssl, > both, something else, ….), but I’d like to think of ways to

Re: [Pythonmac-SIG] apple-Python and TLS 1.0

2017-01-12 Thread Jack Jansen
Ok, so this is a real problem:-( Again, I’m not deep enough into the SSL stuff to really understand this (and specifically whether it needs a new openssl module, a new libssl, both, something else, ….), but I’d like to think of ways to fix this before the shit hits the fan for all poor mac Pyth

Re: [Pythonmac-SIG] apple-Python and TLS 1.0

2017-01-12 Thread Kevin Ollivier
Hi Jack, No, I think you're spot on, this is a big problem. Actually, 2.7.9-2.7.12, even the Python.org ones, are already somewhat broken because they use Apple's ancient OpenSSL version. All the ciphers supported by that version of OpenSSL are ones that are regarded as insecure now, so most mo