Re: [Pythonmac-SIG] apple-Python and TLS 1.0

2017-01-13 Thread Glyph Lefkowitz
> On Jan 12, 2017, at 6:10 AM, Jack Jansen wrote: > > Ok, so this is a real problem:-( > > Again, I’m not deep enough into the SSL stuff to really understand this (and > specifically whether it needs a new openssl module, a new libssl, both, > something else, ….), but I’d like to think of way

Re: [Pythonmac-SIG] apple-Python and TLS 1.0

2017-01-13 Thread Glyph Lefkowitz
> On Jan 10, 2017, at 9:21 AM, Kevin Ollivier wrote: > > Hi Jack, > > No, I think you're spot on, this is a big problem. Actually, 2.7.9-2.7.12, > even the Python.org ones, are already somewhat broken because they use > Apple's ancient OpenSSL version. All the ciphers supported by that versio