Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Depreciate ssl2/3 #2375

Merged
merged 3 commits into from
Jun 26, 2016
Merged

Depreciate ssl2/3 #2375

merged 3 commits into from
Jun 26, 2016

Conversation

danieljkemp
Copy link
Contributor

@danieljkemp danieljkemp commented Jun 26, 2016

Description:
Depreciate sslv2 and sslv3

Following the best practices as defind here:
https://mozilla.github.io/server-side-tls/ssl-config-generator/

Related issue (if applicable): fixes #2364

Pull request in home-assistant.io with documentation (if applicable): home-assistant/home-assistant.io#

Example entry for configuration.yaml (if applicable):
As discussed this is not configurable. It should work with anything made in the last 10 years.

Checklist:

If user exposed functionality or configuration variables are added/changed:

If code communicates with devices:

  • Local tests with tox run successfully. Your PR cannot be merged unless tests pass
  • [N/A] New dependencies have been added to the REQUIREMENTS variable (example).
  • [N/A] New dependencies are only imported inside functions that use them (example).
  • [N/A] New dependencies have been added to requirements_all.txt by running script/gen_requirements_all.py.
  • [N/A] New files were added to .coveragerc.

If the code does not interact with devices:

  • Local tests with tox run successfully. Your PR cannot be merged unless tests pass
  • Tests have been added to verify that the new code works.

Following the best practices as defind here:
https://mozilla.github.io/server-side-tls/ssl-config-generator/

@@ -36,6 +37,22 @@

DATA_API_PASSWORD = 'api_password'

# https://mozilla.github.io/server-side-tls/ssl-config-generator/
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could you add to the comment that it's the intermediate settings?

Daniel J. Kemp added 2 commits June 26, 2016 13:21
Links to the rational rather than the config generator; explains link.
@balloob
Copy link
Member

balloob commented Jun 26, 2016

Awesome! 🐬

@balloob balloob merged commit fb3e388 into home-assistant:dev Jun 26, 2016
@balloob
Copy link
Member

balloob commented Jul 2, 2016

@danieljkemp
Copy link
Contributor Author

Could be a platform specific bug, I don't have a Mac to test it on, and won't be able to look at anything before Sunday.

@AlucardZero could you take a look maybe? This could be hotfix worthy if ssl broke for Mac users.

@chennin
Copy link
Contributor

chennin commented Jul 2, 2016

ssl.OP_NO_COMPRESSION came with Python 3.3, and Home Assistant requires 3.4, so, probably the user needs to fix his Python? I don't have a Mac either.

@home-assistant home-assistant locked and limited conversation to collaborators Mar 17, 2017
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

HA Supports depreciated ssl protocols
3 participants