Commit 28eb87f4 authored by stratakis's avatar stratakis Committed by Victor Stinner

Fixup from test_ssl test_default_ecdh_curve (GH-11877)

Partial backport from cb5b68abCo-authored-by: default avatarChristian Heimes <christian@python.org>
parent b8eaec69
......@@ -2860,6 +2860,9 @@ else:
# should be enabled by default on SSL contexts.
context = ssl.SSLContext(ssl.PROTOCOL_SSLv23)
context.load_cert_chain(CERTFILE)
# TLSv1.3 defaults to PFS key agreement and no longer has KEA in
# cipher name.
context.options |= ssl.OP_NO_TLSv1_3
# Prior to OpenSSL 1.0.0, ECDH ciphers have to be enabled
# explicitly using the 'ECCdraft' cipher alias. Otherwise,
# our default cipher list should prefer ECDH-based ciphers
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment