[issue16692] Support TLS 1.1 and TLS 1.2

Wes Turner added the comment: http://docs.python.org/3.4/whatsnew/3.4.html#ssl re: Backporting to Python 2.7: maybe something like: backports.ssl (like backports.ssl_match_hostname) https://pypi.python.org/pypi/backports/ -- nosy: +westurner ___ Py

[issue16692] Support TLS 1.1 and TLS 1.2

Antoine Pitrou added the comment: Ha. If you're insisting on backporting SSL stuff, I think the best option would be to create a third-party backport of the whole ssl module on PyPI. -- ___ Python tracker

[issue16692] Support TLS 1.1 and TLS 1.2

Mark Kubacki added the comment: Raw backport for Python 2.7. ›raw‹ like in some options are in _ssl only. (_ssl.{err_names_to_codes,err_codes_to_names,lib_codes_to_names,…}) -- nosy: +markk Added file: http://bugs.python.org/file30761/python-2.7.5-tls1.1-and-tls1.2.patch _

[issue16692] Support TLS 1.1 and TLS 1.2

Antoine Pitrou added the comment: > Is there any chance of this being backported to Python 2.7? Given > NIST's complete deprecation of SHA1 and TLS 1.0 by end of 2013, I > imagine there are at least a few folks who can't upgrade to Python > 3.x, but need TLS 1.2 support. I think Ruby just recen

[issue16692] Support TLS 1.1 and TLS 1.2

Thom Nichols added the comment: Is there any chance of this being backported to Python 2.7? Given NIST's complete deprecation of SHA1 and TLS 1.0 by end of 2013, I imagine there are at least a few folks who can't upgrade to Python 3.x, but need TLS 1.2 support. I think Ruby just recently imp

[issue16692] Support TLS 1.1 and TLS 1.2

Antoine Pitrou added the comment: Finally committed. Thanks for the patches! -- resolution: -> fixed stage: patch review -> committed/rejected status: open -> closed ___ Python tracker

[issue16692] Support TLS 1.1 and TLS 1.2

Roundup Robot added the comment: New changeset 02a89bd646ca by Antoine Pitrou in branch 'default': Issue #16692: The ssl module now supports TLS 1.1 and TLS 1.2. Initial patch by Michele Orrù. http://hg.python.org/cpython/rev/02a89bd646ca -- nosy: +python-dev _

[issue16692] Support TLS 1.1 and TLS 1.2

Antoine Pitrou added the comment: Here is an updated patch fixing the aforementioned issue (as well as another small issue with the set_ciphers("ALL") hack). -- Added file: http://bugs.python.org/file29588/tls12.patch ___ Python tracker

[issue16692] Support TLS 1.1 and TLS 1.2

Antoine Pitrou added the comment: Ok, yet another issue :-) Testing on a machine with OpenSSL 1.0.0 gives the following failures. I think you mixed up skipIf / skipUnless. == ERROR: test_protocol_sslv2 (test.test_ssl.ThreadedTe

[issue16692] Support TLS 1.1 and TLS 1.2

Changes by Michele Orrù : Added file: http://bugs.python.org/file29587/issue16692.4.patch ___ Python tracker ___ ___ Python-bugs-list mailing

[issue16692] Support TLS 1.1 and TLS 1.2

Antoine Pitrou added the comment: Thanks. I don't know what happened, but the last patch fails to apply: $ patch -p1 < issue16692.3.patch patching file Doc/library/ssl.rst patching file Doc/whatsnew/3.4.rst patching file Lib/ssl.py patching file Lib/test/test_ssl.py patching file Misc/NEWS Hunk

[issue16692] Support TLS 1.1 and TLS 1.2

Michele Orrù added the comment: .. sorry for all these trivialities. -- Added file: http://bugs.python.org/file29584/issue16692.3.patch ___ Python tracker ___ ___

[issue16692] Support TLS 1.1 and TLS 1.2

Michele Orrù added the comment: synced with tip > This decorator looks like it would be impressed in a simpler way, > using unittest.skipIf (or unittest.skipUnless). > It would be nice to check that connecting succeeds from a > TLSv1_1 client on a SSLv23 server. yep, thanks. > Not sure why y

[issue16692] Support TLS 1.1 and TLS 1.2

Antoine Pitrou added the comment: Ok, some review comments: + .. warning:: requires at least openssl version 1.0.1 + .. warning:: requires at least openssl version 1.0.1 The warnings are not warranted here. You might simply say "Available only with openssl version 1.0.1+." +def skip_if_u

[issue16692] Support TLS 1.1 and TLS 1.2

Antoine Pitrou added the comment: Michele, your latest patch doesn't apply on the default branch. However, I'll still do a review. -- stage: needs patch -> patch review ___ Python tracker _

[issue16692] Support TLS 1.1 and TLS 1.2

Michele Orrù added the comment: (ping) -- ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.or

[issue16692] Support TLS 1.1 and TLS 1.2

Changes by Éric Araujo : -- nosy: -eric.araujo ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.pyt

[issue16692] Support TLS 1.1 and TLS 1.2

Changes by Michele Orrù : Added file: http://bugs.python.org/file29066/issue16692.1.patch ___ Python tracker ___ ___ Python-bugs-list mailing

[issue16692] Support TLS 1.1 and TLS 1.2

Changes by Michele Orrù : -- nosy: +eric.araujo ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.pyt

[issue16692] Support TLS 1.1 and TLS 1.2

Changes by Michele Orrù : -- keywords: +patch nosy: +maker Added file: http://bugs.python.org/file29022/issue16692.patch ___ Python tracker ___ __

[issue16692] Support TLS 1.1 and TLS 1.2

Changes by Christian Heimes : -- components: +Extension Modules nosy: +christian.heimes ___ Python tracker ___ ___ Python-bugs-list ma

[issue16692] Support TLS 1.1 and TLS 1.2

Changes by Giampaolo Rodola' : -- nosy: +giampaolo.rodola ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http:

[issue16692] Support TLS 1.1 and TLS 1.2

Changes by Jesús Cea Avión : -- nosy: +jcea ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.

[issue16692] Support TLS 1.1 and TLS 1.2

Changes by Arfrever Frehtes Taifersar Arahesis : -- nosy: +Arfrever ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscri

[issue16692] Support TLS 1.1 and TLS 1.2

New submission from Antoine Pitrou: Recent OpenSSL versions (e.g. 1.0.1c) have explicit support for TLS 1.1 and (presumably, although undocumented-ly) TLS 1.2 through TLSv1_1_method() and TLSv1_2_method(). It should be easy to add such support to the ssl module (although figuring out how exact