summaryrefslogtreecommitdiffstats
path: root/Modules
diff options
context:
space:
mode:
authorAndrew M. Kuchling <amk@amk.ca>2004-07-10 21:36:55 (GMT)
committerAndrew M. Kuchling <amk@amk.ca>2004-07-10 21:36:55 (GMT)
commit27d3dda7f16257fe9c9d67292aca8c6fbaa2a84e (patch)
tree8719b9be09d6db4c3e6cb3edade6a4701a1dccf7 /Modules
parent79d7e92a5cf014fffbad02a22e9b67a3c9d67248 (diff)
downloadcpython-27d3dda7f16257fe9c9d67292aca8c6fbaa2a84e.zip
cpython-27d3dda7f16257fe9c9d67292aca8c6fbaa2a84e.tar.gz
cpython-27d3dda7f16257fe9c9d67292aca8c6fbaa2a84e.tar.bz2
[Patch #909007] Enable a bunch of safe bug workarounds in OpenSSL, for compatibility with various broken SSL implementations out there.
Diffstat (limited to 'Modules')
-rw-r--r--Modules/_ssl.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/Modules/_ssl.c b/Modules/_ssl.c
index 76cd7dd..906a72a 100644
--- a/Modules/_ssl.c
+++ b/Modules/_ssl.c
@@ -220,6 +220,7 @@ newPySSLObject(PySocketSockObject *Sock, char *key_file, char *cert_file)
ret = SSL_CTX_use_certificate_chain_file(self->ctx,
cert_file);
Py_END_ALLOW_THREADS
+ SSL_CTX_set_options(self->ctx, SSL_OP_ALL); /* ssl compatibility */
if (ret < 1) {
errstr = "SSL_CTX_use_certificate_chain_file error";
goto fail;