[PATCH 8 of 8 v5] sslutil: properly detect which TLS versions are supported by the ssl module

# HG changeset patch # User Manuel Jacob # Date 1590976314 -7200 # Mon Jun 01 03:51:54 2020 +0200 # Node ID fbd7fcc81958b551b6dcbc26cc22fbdd0a0cdc33 # Parent 64807e560eedc6c2571d34ffb7bd2f7e356dd606 # EXP-Topic require_modern_ssl sslutil: properly detect which TLS versions are supported by t

[PATCH 7 of 8 v5] sslutil: propagate return value ssl.PROTOCOL_SSLv23 from protocolsettings()

# HG changeset patch # User Manuel Jacob # Date 1590970587 -7200 # Mon Jun 01 02:16:27 2020 +0200 # Node ID 64807e560eedc6c2571d34ffb7bd2f7e356dd606 # Parent 7576507bfe5ea28ab6d496d532bb9b453998ca35 # EXP-Topic require_modern_ssl sslutil: propagate return value ssl.PROTOCOL_SSLv23 from proto

[PATCH 6 of 8 v5] sslutil: remove dead code (that failed if only TLS 1.0 is available)

# HG changeset patch # User Manuel Jacob # Date 1590957109 -7200 # Sun May 31 22:31:49 2020 +0200 # Node ID 7576507bfe5ea28ab6d496d532bb9b453998ca35 # Parent b014f68a7e5f4d3cf72ca6f5d50e3059d05e3ed3 # EXP-Topic require_modern_ssl sslutil: remove dead code (that failed if only TLS 1.0 is avai

[PATCH 5 of 8 v5] config: remove unused hostsecurity.disabletls10warning config

# HG changeset patch # User Manuel Jacob # Date 1590877849 -7200 # Sun May 31 00:30:49 2020 +0200 # Node ID b014f68a7e5f4d3cf72ca6f5d50e3059d05e3ed3 # Parent ed90a9083487c637edb528826046f36646baf2a7 # EXP-Topic require_modern_ssl config: remove unused hostsecurity.disabletls10warning config

[PATCH 4 of 8 v5] sslutil: remove dead code (that downgraded default minimum TLS version)

# HG changeset patch # User Manuel Jacob # Date 1590956135 -7200 # Sun May 31 22:15:35 2020 +0200 # Node ID ed90a9083487c637edb528826046f36646baf2a7 # Parent e0d6fc43f3227a11934a69c8eff40d307a5ad697 # EXP-Topic require_modern_ssl sslutil: remove dead code (that downgraded default minimum TLS

[PATCH 3 of 8 v5] tests: stop checking for optional, now impossible output

# HG changeset patch # User Manuel Jacob # Date 1590877556 -7200 # Sun May 31 00:25:56 2020 +0200 # Node ID e0d6fc43f3227a11934a69c8eff40d307a5ad697 # Parent 8ebbebfe6cefed68e01f237eac1dcdf6aa6f7fbc # EXP-Topic require_modern_ssl tests: stop checking for optional, now impossible output The

[PATCH 2 of 8 v5] sslutil: remove comment referring to unsupported legacy stacks

# HG changeset patch # User Manuel Jacob # Date 1590785278 -7200 # Fri May 29 22:47:58 2020 +0200 # Node ID 8ebbebfe6cefed68e01f237eac1dcdf6aa6f7fbc # Parent 2d2497e32978bc17060f5142b45789b449e7d9d3 # EXP-Topic require_modern_ssl sslutil: remove comment referring to unsupported legacy stacks

[PATCH 1 of 8 v5] setup: require that Python has TLS 1.1 or TLS 1.2

# HG changeset patch # User Manuel Jacob # Date 1590874939 -7200 # Sat May 30 23:42:19 2020 +0200 # Node ID 2d2497e32978bc17060f5142b45789b449e7d9d3 # Parent dd7c4a208a4ed6c798330a21b13a349a020c877d # EXP-Topic require_modern_ssl setup: require that Python has TLS 1.1 or TLS 1.2 This ensure

Re: [PATCH 2 of 5] sslutil: fix names of variables containing minimum protocol strings

On Sun, 31 May 2020 12:24:45 +0200, Manuel Jacob wrote: > # HG changeset patch > # User Manuel Jacob > # Date 1590914858 -7200 > # Sun May 31 10:47:38 2020 +0200 > # Node ID efea7f15c5d5e32f3a6be167c733581afc612b3c > # Parent ce6f9d86860e841386d94f9434606ca96d426310 > # EXP-Topic sslutil_cle

Re: [PATCH v4] setup: require that Python has TLS 1.1 or TLS 1.2

On Sun, 31 May 2020 09:08:16 +0200, Manuel Jacob wrote: > # HG changeset patch > # User Manuel Jacob > # Date 1590874939 -7200 > # Sat May 30 23:42:19 2020 +0200 > # Node ID 0b80baeded449c19f89d4b6cec2a00eec4d286a7 > # Parent 61cdc8137d5326ed075b982693469a2134365ff5 > # EXP-Topic require_mod

Re: [PATCH 1 of 5] sslutil: stop returning argument as third return value of protocolsettings()

On Sun, 31 May 2020 12:24:44 +0200, Manuel Jacob wrote: > # HG changeset patch > # User Manuel Jacob > # Date 1590911745 -7200 > # Sun May 31 09:55:45 2020 +0200 > # Node ID ce6f9d86860e841386d94f9434606ca96d426310 > # Parent 61cdc8137d5326ed075b982693469a2134365ff5 > # EXP-Topic sslutil_cle

Re: [PATCH 1 of 5] sslutil: stop returning argument as third return value of protocolsettings()

I sent an intro mail to the patch series, noting that this series is independent of the patch raising required TLS version. However that one was rejected by the mailing list filter, so I'm sending out that information again, to avoid confusion. ___ M

[PATCH 5 of 5] sslutil: check for OpenSSL without TLS 1.0 support in one case

# HG changeset patch # User Manuel Jacob # Date 1590919637 -7200 # Sun May 31 12:07:17 2020 +0200 # Node ID ccb1f10b9fd61d82a2227d648208465f16dccdf3 # Parent d950d0faa52d3db159147891e58f4488042d9afe # EXP-Topic sslutil_cleanup sslutil: check for OpenSSL without TLS 1.0 support in one case I

[PATCH 4 of 5] sslutil: don't set minimum TLS version to 1.0 if 1.2 but not 1.1 is available

# HG changeset patch # User Manuel Jacob # Date 1590916221 -7200 # Sun May 31 11:10:21 2020 +0200 # Node ID d950d0faa52d3db159147891e58f4488042d9afe # Parent 14fb5b19169473e9a14a5ad4371ca727cd8c8293 # EXP-Topic sslutil_cleanup sslutil: don't set minimum TLS version to 1.0 if 1.2 but not 1.1

[PATCH 3 of 5] sslutil: add FIXME about supportedprotocols possibly containing too many items

# HG changeset patch # User Manuel Jacob # Date 1590918063 -7200 # Sun May 31 11:41:03 2020 +0200 # Node ID 14fb5b19169473e9a14a5ad4371ca727cd8c8293 # Parent efea7f15c5d5e32f3a6be167c733581afc612b3c # EXP-Topic sslutil_cleanup sslutil: add FIXME about supportedprotocols possibly containing t

[PATCH 1 of 5] sslutil: stop returning argument as third return value of protocolsettings()

# HG changeset patch # User Manuel Jacob # Date 1590911745 -7200 # Sun May 31 09:55:45 2020 +0200 # Node ID ce6f9d86860e841386d94f9434606ca96d426310 # Parent 61cdc8137d5326ed075b982693469a2134365ff5 # EXP-Topic sslutil_cleanup sslutil: stop returning argument as third return value of protoco

[PATCH 2 of 5] sslutil: fix names of variables containing minimum protocol strings

# HG changeset patch # User Manuel Jacob # Date 1590914858 -7200 # Sun May 31 10:47:38 2020 +0200 # Node ID efea7f15c5d5e32f3a6be167c733581afc612b3c # Parent ce6f9d86860e841386d94f9434606ca96d426310 # EXP-Topic sslutil_cleanup sslutil: fix names of variables containing minimum protocol strin

mercurial@44885: 3 new changesets

3 new changesets in mercurial: https://www.mercurial-scm.org/repo/hg/rev/94f227baa76f changeset: 44883:94f227baa76f user:Augie Fackler date:Thu May 28 09:51:13 2020 -0400 summary: githelp: add some minimal help for pickaxe functionality https://www.mercurial-scm.org/repo/hg

[PATCH v4] setup: require that Python has TLS 1.1 or TLS 1.2

# HG changeset patch # User Manuel Jacob # Date 1590874939 -7200 # Sat May 30 23:42:19 2020 +0200 # Node ID 0b80baeded449c19f89d4b6cec2a00eec4d286a7 # Parent 61cdc8137d5326ed075b982693469a2134365ff5 # EXP-Topic require_modern_ssl setup: require that Python has TLS 1.1 or TLS 1.2 This increa