Re: [Twisted-Python] Specifying ciphers in ssl.optionsForClientTLS

2015-02-16 Thread Hynek Schlawack
On 17 Feb 2015, at 2:52, Glyph Lefkowitz wrote: I need to loosen up the default cipher list to allow RC4 (some sites our customers use like myaccounts.socalgas.com still use it). I was going to pass the following dict into the extraCertificateOptions argument of ssl.optionsForClientTLS, but was

Re: [Twisted-Python] Specifying ciphers in ssl.optionsForClientTLS

2015-02-16 Thread Jason J. W. Williams
> As the documentation for extraCertificateOptions says, if you need to use it > it's a bug in the interface. As such, please file it :-). This escape-hatch > was presented specifically so we could discover which features of that > interface were really necessary customizations and which were

Re: [Twisted-Python] Specifying ciphers in ssl.optionsForClientTLS

2015-02-16 Thread Jason J. W. Williams
> Some browsers won’t — Firefox refuses to use RC4 :) I saw that on Firefox's wiki, but in reality Firefox 35 still does allow RC4: http://www.screencast.com/t/AuMRylAV -J ___ Twisted-Python mailing list Twisted-Python@twistedmatrix.com http://twistedm

Re: [Twisted-Python] Specifying ciphers in ssl.optionsForClientTLS

2015-02-16 Thread Jason J. W. Williams
> As the documentation for extraCertificateOptions says, if you need to use it > it's a bug in the interface. As such, please file it :-). This escape-hatch > was presented specifically so we could discover which features of that > interface were really necessary customizations and which were

Re: [Twisted-Python] Specifying ciphers in ssl.optionsForClientTLS

2015-02-16 Thread HawkOwl
> On 17 Feb 2015, at 09:52, Glyph Lefkowitz wrote: > > >> On Feb 16, 2015, at 4:53 PM, Jason J. W. Williams >> wrote: >> >> Hi, >> >> I need to loosen up the default cipher list to allow RC4 (some sites >> our customers use like myaccounts.socalgas.com still use it). >> >> I was going to p

Re: [Twisted-Python] Specifying ciphers in ssl.optionsForClientTLS

2015-02-16 Thread Glyph Lefkowitz
> On Feb 16, 2015, at 4:53 PM, Jason J. W. Williams > wrote: > > Hi, > > I need to loosen up the default cipher list to allow RC4 (some sites > our customers use like myaccounts.socalgas.com still use it). > > I was going to pass the following dict into the > extraCertificateOptions argument

[Twisted-Python] Specifying ciphers in ssl.optionsForClientTLS

2015-02-16 Thread Jason J. W. Williams
Hi, I need to loosen up the default cipher list to allow RC4 (some sites our customers use like myaccounts.socalgas.com still use it). I was going to pass the following dict into the extraCertificateOptions argument of ssl.optionsForClientTLS, but was curious if there as a better way: {"acceptab