diff options
author | Calum Lind <calumlind@gmail.com> | 2018-05-16 11:27:49 +0100 |
---|---|---|
committer | Calum Lind <calumlind+deluge@gmail.com> | 2018-06-27 16:41:21 +0100 |
commit | c3a2c67b98501932438762a47c7ef45e4cebb66b (patch) | |
tree | 55f541ef596d9e9eedd95b05ee3540f9db991199 /deluge/ui/web/server.py | |
parent | 200e8f552b5aee8e7d597750acf132a37f2a00c8 (diff) | |
download | deluge-c3a2c67b98501932438762a47c7ef45e4cebb66b.tar.gz deluge-c3a2c67b98501932438762a47c7ef45e4cebb66b.tar.bz2 deluge-c3a2c67b98501932438762a47c7ef45e4cebb66b.zip |
[Py3] A large set of fixes for tests to pass under Python 3
The usual minor fixes for unicode/bytes for library calls.
The minimum Twisted version is now 16 for Python 3 support so remove old
code and start replacing deprecated methods.
Raised the minimum TLS version to 1.2 for the web server.
Diffstat (limited to 'deluge/ui/web/server.py')
-rw-r--r-- | deluge/ui/web/server.py | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/deluge/ui/web/server.py b/deluge/ui/web/server.py index 7516ff43e..117b381e9 100644 --- a/deluge/ui/web/server.py +++ b/deluge/ui/web/server.py @@ -19,7 +19,7 @@ import tempfile from OpenSSL.crypto import FILETYPE_PEM from twisted.application import internet, service from twisted.internet import defer, reactor -from twisted.internet.ssl import SSL, Certificate, CertificateOptions, KeyPair +from twisted.internet.ssl import SSL, Certificate, CertificateOptions, KeyPair, TLSVersion from twisted.web import http, resource, server, static from deluge import common, component, configmanager @@ -668,7 +668,11 @@ class DelugeWeb(component.Component): certificate = Certificate.loadPEM(cert.read()).original with open(configmanager.get_config_dir(self.pkey)) as pkey: private_key = KeyPair.load(pkey.read(), FILETYPE_PEM).original - options = CertificateOptions(privateKey=private_key, certificate=certificate, method=SSL.SSLv23_METHOD) + options = CertificateOptions( + privateKey=private_key, + certificate=certificate, + raiseMinimumTo=TLSVersion.TLSv1_2, + ) ctx = options.getContext() ctx.set_options(SSL.OP_NO_SSLv2 | SSL.OP_NO_SSLv3) ctx.use_certificate_chain_file(configmanager.get_config_dir(self.cert)) |