diff options
| author | Christian Heimes <christian@python.org> | 2016-09-10 20:43:48 (GMT) |
|---|---|---|
| committer | Christian Heimes <christian@python.org> | 2016-09-10 20:43:48 (GMT) |
| commit | 358cfd426ccc0fcd6a7940d306602138e76420ae (patch) | |
| tree | d57ee1b7dbe174fb49f35c4eac449e4404a96357 /Misc/NEWS | |
| parent | 70360194c768efb0b26d524d5b94d4da963d632a (diff) | |
| download | cpython-358cfd426ccc0fcd6a7940d306602138e76420ae.zip cpython-358cfd426ccc0fcd6a7940d306602138e76420ae.tar.gz cpython-358cfd426ccc0fcd6a7940d306602138e76420ae.tar.bz2 | |
Issue 28043: SSLContext has improved default settings
The options OP_NO_COMPRESSION, OP_CIPHER_SERVER_PREFERENCE, OP_SINGLE_DH_USE, OP_SINGLE_ECDH_USE, OP_NO_SSLv2 (except for PROTOCOL_SSLv2), and OP_NO_SSLv3 (except for PROTOCOL_SSLv3) are set by default. The initial cipher suite list contains only HIGH ciphers, no NULL ciphers and MD5 ciphers (except for PROTOCOL_SSLv2).
Diffstat (limited to 'Misc/NEWS')
| -rw-r--r-- | Misc/NEWS | 4 |
1 files changed, 4 insertions, 0 deletions
@@ -138,6 +138,10 @@ Core and Builtins Library ------- +- Issue 28043: SSLContext has improved default settings: OP_NO_SSLv2, + OP_NO_SSLv3, OP_NO_COMPRESSION, OP_CIPHER_SERVER_PREFERENCE, + OP_SINGLE_DH_USE, OP_SINGLE_ECDH_USE and HIGH ciphers without MD5. + - Issue #24693: Changed some RuntimeError's in the zipfile module to more appropriate types. Improved some error messages and debugging output. |