Disable weak ciphers with cherrypy (python 2) -


i'm using cherrypy 3.8.0 python 2 use ssl/tls using pyopenssl.

i want disable ssl3 avoid poodle (or other weak ciphers).

here's have far:

  server_config={           'server.socket_port': 443,           'server.ssl_module':'pyopenssl',           'server.ssl_certificate':'/path/myserver.crt',           'server.ssl_private_key':'/path/myserver.key',       }

this similar this question python 2 , pyopenssl.

how can specify or exclude specific ciphers? thanks!

to disable ssl3, should set ssl_context variable rather accepting default. here's example using python's built-in ssl module (in lieu of built-in cherrypy ssl module).

import cherrypy openssl import ssl  ctx = ssl.context(ssl.sslv23_method) ctx.set_options(ssl.op_no_sslv2 | ssl.op_no_sslv3)  ...  server_config = {     'server.socket_host': '0.0.0.0',     'server.socket_port': 443,     'server.ssl_context': ctx }  cherrypy.config.update(server_config)

where in case, ssl openssl module.

it's worth noting beginning in python 3.2.3, ssl module disables weak ciphers default.

furthermore, can set ciphers want with

ciphers = {     'dhe-rsa-ae256-sha',     ...     'rc4-sha' }  ctx.set_cipher_list(':'.join(ciphers))

if you're using cherrypywsgiserver web.wsgiserver module, set default ciphers with

cherrypywsgiserver.ssl_adapter.context.set_cipher_list(':'.join(ciphers))

lastly, here sources (asking similar questions) may want at:


Comments

Post a Comment

Popular posts from this blog

get url and add instance to a model with prefilled foreign key :django admin -

Image
i have page in each contest shown in row. each row contains contest id , link other model names have foreign key contest. news model: class news(models.model): title = models.charfield(max_length=50, null=true) description = models.textfield() time = models.timefield( default= datetime.datetime.now().time()) contest = models.foreignkey(contest) i want use admin adding , changing these models. want when user clicks on 'news' has foreign key contest id=1, shows list of news value foreign key. use {% instance in instances %} <tr class="{% cycle 'row1' 'row2' %}"> <td>{{ instance.title }}</td> <td>{{ instance.starttime }}</td> <td>{{ instance.timespan }}</td> <td>{{ instance.date }}</td> <td><a href="/adm...
Read more

css - Make div keyboard-scrollable in jQuery Mobile? -

from can tell, although jquery-mobile-powered pages can contain divs overflow set scroll or auto, , these divs can scrolled one-screen bar or mouse wheel, cannot scrolled using arrow keys, page-up/page-down, or home/end. instead, official "page" div (with data-role="page") absorbs input. perhaps other divs can't acquire focus, i'm not sure. is there way around this? edit: jsfiddle of simple example: https://jsfiddle.net/qogz0shx/ <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js"></script> <script src="https://ajax.googleapis.com/ajax/libs/jquerymobile/1.4.5/jquery.mobile.min.js"> </script> <link rel="stylesheet" href="https://code.jquery.com/mobile/1.4.5/jquery.mobile-1.4.5.css"/> <style> #outer { overflow:scroll; height: 50vh; width: 50vw; } #inner { height: 500vh; width: 500vw; } ...
Read more

android - Keyboard hides my half of edit-text and button below it even in scroll view -

i having trouble keyboard covers edit-text , half of button in scroll view. here's layout , please tell me how should resolve problem. many questions on topic none of them s working me. <?xml version="1.0" encoding="utf-8"?> <linearlayout xmlns:android="http://schemas.android.com/apk/res/android" android:layout_width="match_parent" android:background="@drawable/bg" android:layout_height="match_parent"> <scrollview android:layout_width="match_parent" android:fillviewport="true" android:layout_height="match_parent"> <relativelayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical"> <linearlayout android:layout_width="match_parent" android:layout_height="w...
Read more