Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

Use TLSv1.2 for fake servers in tests #8208

Merged
merged 3 commits into from
Sep 10, 2020
Merged

Commits on Aug 30, 2020

  1. Use TLSv1.2 for fake servers in tests

    Some Linux distros have begun disabling TLSv1.0 and TLSv1.1 by default
    for security reasons, for example in Fedora 33 onwards:
    
    https://fedoraproject.org/wiki/Changes/StrongCryptoSettings2
    
    Use TLSv1.2 for the fake TLS servers created in the test suite, to avoid
    failures due to OpenSSL disallowing TLSv1.0:
    
        <twisted.python.failure.Failure OpenSSL.SSL.Error: [('SSL routines',
        'ssl_choose_client_version', 'unsupported protocol')]>
    
    Signed-off-by: Dan Callaghan <djc@djc.id.au>
    danc86 committed Aug 30, 2020
    Configuration menu
    Copy the full SHA
    9b3d0d6 View commit details
    Browse the repository at this point in the history

Commits on Sep 10, 2020

  1. Use any TLS version for fake servers in tests

    In spite of its name, the OpenSSL constant SSLv23_METHOD actually means
    "use any mutually acceptable version". This avoids specifying any
    particular TLS version at all.
    
    Signed-off-by: Dan Callaghan <djc@djc.id.au>
    danc86 committed Sep 10, 2020
    Configuration menu
    Copy the full SHA
    98b8869 View commit details
    Browse the repository at this point in the history
  2. Update changelog.d/8208.misc

    richvdh committed Sep 10, 2020
    Configuration menu
    Copy the full SHA
    68e3511 View commit details
    Browse the repository at this point in the history