changeset 78c793ed087b in /home/hg/repos/gajim
author: Fedor Brunner fedor.brunner@azet.sk branches: details:http://hg.gajim.org/gajim?cmd=changeset;node=78c793ed087b description: Add ability to configure TLS protocol version.
add configuration option tls_version
Related to https://python-nbxmpp.gajim.org/ticket/17
diffstat:
src/common/config.py | 1 + src/common/connection.py | 4 +++- 2 files changed, 4 insertions(+), 1 deletions(-)
diffs (27 lines):
diff -r 43fa61ed5fb7 -r 78c793ed087b src/common/config.py --- a/src/common/config.py Sun Jan 26 19:36:23 2014 +0100 +++ b/src/common/config.py Mon Jan 27 16:31:08 2014 +0100 @@ -349,6 +349,7 @@ 'enable_esessions': [opt_bool, True, _('Enable ESessions encryption for this account.')], 'autonegotiate_esessions': [opt_bool, True, _('Should Gajim automatically start an encrypted session when possible?')], 'connection_types': [ opt_str, 'tls ssl plain', _('Ordered list (space separated) of connection type to try. Can contain tls, ssl or plain')], + 'tls_version': [ opt_str, '1.0', '' ], 'cipher_list': [ opt_str, 'HIGH:!aNULL:RC4-SHA', '' ], 'action_when_plaintext_connection': [ opt_str, 'warn', _('Show a warning dialog before sending password on an plaintext connection. Can be 'warn', 'connect', 'disconnect'') ], 'warn_when_insecure_ssl_connection': [ opt_bool, True, _('Show a warning dialog before using standard SSL library.') ], diff -r 43fa61ed5fb7 -r 78c793ed087b src/common/connection.py --- a/src/common/connection.py Sun Jan 26 19:36:23 2014 +0100 +++ b/src/common/connection.py Mon Jan 27 16:31:08 2014 +0100 @@ -1252,9 +1252,11 @@ if not os.path.exists(cacerts): cacerts = '' mycerts = common.gajim.MY_CACERTS + tls_version = gajim.config.get_per('accounts', self.name, + 'tls_version') cipher_list = gajim.config.get_per('accounts', self.name, 'cipher_list') - secure_tuple = (self._current_type, cacerts, mycerts, cipher_list) + secure_tuple = (self._current_type, cacerts, mycerts, tls_version, cipher_list)
con = nbxmpp.NonBlockingClient( domain=self._hostname,