[issue36484] Can't reorder TLS 1.3 ciphersuites

Change by Sanchayan Ghosh : Added file: https://bugs.python.org/file50652/0001-Add-TLS-v1.3-cipher-suite-set-function.patch ___ Python tracker ___

[issue36484] Can't reorder TLS 1.3 ciphersuites

Change by Sanchayan Ghosh : Removed file: https://bugs.python.org/file50650/0001-Add-TLS-v1.3-cipher-suite-set-function.patch ___ Python tracker ___ __

[issue36484] Can't reorder TLS 1.3 ciphersuites

Sanchayan Ghosh added the comment: Here is the PR as well. While I agree that there is no more a reason to reorder cipher suites and that we should use our certificates to basically ensure a secure connection, the advantage of the OpenSSL API is it provides us the function to influence the s

[issue36484] Can't reorder TLS 1.3 ciphersuites

Sanchayan Ghosh added the comment: I have written a function that will allow us to reorder TLS v1.3. Since I have tried to keep a 1-1 binding, you will have to first remove the cipher suites entirely by giving a blank string, and then add TLS v1.2 and v1.3 cipher suites. -- keywords:

[issue36484] Can't reorder TLS 1.3 ciphersuites

Change by Sam Bull : -- nosy: +dreamsorcerer ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyt

[issue36484] Can't reorder TLS 1.3 ciphersuites

Change by Terry J. Reedy : -- type: -> enhancement versions: +Python 3.8 -Python 3.6 ___ Python tracker ___ ___ Python-bugs-list ma

[issue36484] Can't reorder TLS 1.3 ciphersuites

Eman Alashwali added the comment: Thanks. Just to clarify regarding your comment: "Applications shouldn't modify the cipher suites any more.": I use python to develop scripts for running experiments, which requires me to simulate specific clients precisely including their TLS 1.3 ciphers order.

[issue36484] Can't reorder TLS 1.3 ciphersuites

Christian Heimes added the comment: I don't have plans to implement cipher suite selection for TLS 1.3 any time soon, maybe not at all. TLS 1.3 changed cipher selection a lot, making the API more complicated. The signature algorithm and key agreement groups are handled as separate extensions

[issue36484] Can't reorder TLS 1.3 ciphersuites

New submission from Eman Alashwali : Wen using the SSL module, I need to be able to reorder the ciphersuites list in TLS 1.3. I was able to do this with python using SSLContext.set_ciphers(ciphers) when working with TLS 1.2. But this is not possible with TLS 1.3 ciphersuites. The need to reor