Date: Tue, 13 Dec 2022 04:10:02 +0000 From: bugzilla-noreply@freebsd.org To: python@FreeBSD.org Subject: [Bug 268043] devel/py-twisted: Consumer ports fail to run: module 'OpenSSL.SSL' has no attribute 'TLS_METHOD' after 22.10.0 update Message-ID: <bug-268043-21822-5K7vKUlQoI@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-268043-21822@https.bugs.freebsd.org/bugzilla/> References: <bug-268043-21822@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D268043 Charlie Li <vishwin@freebsd.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |vishwin@freebsd.org --- Comment #8 from Charlie Li <vishwin@freebsd.org> --- While this works as a quick-fix, this text replacement is ultimately incorr= ect. Hardcoding to TLSv1_2_method() locks the connection to TLSv1.2 mode only, w= hich is problematic if higher protocol versions (ie TLSv1.3) are mutually availa= ble between client and server. The correct solution is to update security/py-openssl to 21.0.0, as TLS_method() was exposed then, and the minimum security/py-cryptography ver= sion is 3.3. This commit should then be reverted. --=20 You are receiving this mail because: You are on the CC list for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-268043-21822-5K7vKUlQoI>