mirrors/cpython
1
0
Fork 0
mirror of https://github.com/python/cpython.git synced 2025-08-04 00:48:58 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 8

Issue #13885: CVE-2011-3389: the _ssl module would always disable the CBC IV attack countermeasure.

Browse source
This commit is contained in:
Antoine Pitrou 2012-01-27 09:48:47 +01:00
parent 889bb2969d
commit f2bf8a6ac5
2 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
Modules/_ssl.c
View file

@ -365,7 +365,8 @@ newPySSLObject(PySocketSockObject *Sock, char *key_file, char *cert_file,
}
/* ssl compatibility */
SSL_CTX_set_options(self->ctx, SSL_OP_ALL);
SSL_CTX_set_options(self->ctx,
SSL_OP_ALL & ~SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS);
verification_mode = SSL_VERIFY_NONE;
if (certreq == PY_SSL_CERT_OPTIONAL)