Donald Stufft added the comment:

I don't have a new enough OpenSSL to test against SSL_CTX_set_ecdh_auto and I 
don't really know C very well so I didn't want to do try to handle that.

That being said, here is a patch that allows you to call 
SSLContext().set_ecdh_curve() without any argument, and if you do that it'll 
use the "default" curve. This is currently hardcoded to prime256v1 but ideally 
at some point it would use SSL_CTX_set_ecdh_auto if available.

I don't really know C, so I had to Google around to learn enough to write this 
patch, so please look it over closely?

----------
keywords: +patch
Added file: http://bugs.python.org/file34563/ecdh.diff

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue21015>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to