startTLS: set minimum protocol version to TLS 1.2

This commit is contained in:
Alberto Sottile 2019-02-07 15:31:35 +01:00
parent abaf178fa6
commit b19f2eaaac

View File

@ -213,7 +213,8 @@ class SyncFactory(Factory):
certifpyssl = crypto.load_certificate(crypto.FILETYPE_PEM, certif) certifpyssl = crypto.load_certificate(crypto.FILETYPE_PEM, certif)
chainpyssl = [crypto.load_certificate(crypto.FILETYPE_PEM, chain)] chainpyssl = [crypto.load_certificate(crypto.FILETYPE_PEM, chain)]
contextFactory = ssl.CertificateOptions(privateKey=privkeypyssl, certificate=certifpyssl, extraCertChain=chainpyssl) contextFactory = ssl.CertificateOptions(privateKey=privkeypyssl, certificate=certifpyssl,
extraCertChain=chainpyssl, raiseMinimumTo=ssl.TLSVersion.TLSv1_2)
self.options = contextFactory self.options = contextFactory
except Exception as e: except Exception as e:
print(e) print(e)