*pycurl* now provides options to require TLSv1.1 or 1.2
With this update, *pycurl* has been enhanced to support options that make it possible to require the use of the 1.1 or 1.2 versions of the TLS protocol, which improves the security of communication.
Created attachment 1070745[details]
support for TLSv1_x options
Description of problem:
pycurl doesn't support the TLS1.1 and TLS1.2 options introduced in curl-7.19.7-43
Version-Release number of selected component (if applicable):
python-pycurl-7.19.0-8.el6
How reproducible:
always
Steps to Reproduce:
1. create test script:
# cat /tmp/pycurl_TLS.py
import pycurl
from StringIO import StringIO
buffer = StringIO()
c=pycurl.Curl()
c.setopt(c.URL, "https://www.redhat.com")
c.setopt(c.SSLVERSION, c.SSLVERSION_TLSv1_2)
c.perform()
c.close()
body = buffer.getvalue()
print(body)
2.
# python /tmp/pycurl_TLS.py
Actual results:
Traceback (most recent call last):
File "/tmp/pycurl_TLS.py", line 9, in <module>
c.setopt(c.SSLVERSION, c.SSLVERSION_TLSv1_2)
AttributeError: SSLVERSION_TLSv1_2
Expected results:
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
...
Additional info:
Easyfix patch attached.
needed to propagate to upstream
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://rhn.redhat.com/errata/RHEA-2016-0757.html