debian/patches/set-defaults-to-be-tlsv1-not-sslv23.patch

   1 Description: Do not use SSLv23 by default, but TLSv1
   2  Default protocol should really be TLSv1 and not SSLv23.
   3 Author: Thomas Goirand <zigo@debian.org>
   4 Forwarded: no
   5 Last-Update: 2015-05-21
   6
   7 --- python-eventlet-0.17.3.orig/eventlet/green/ssl.py
   8 +++ python-eventlet-0.17.3/eventlet/green/ssl.py
   9 @@ -46,7 +46,7 @@ class GreenSSLSocket(_original_sslsocket
  10
  11      def __init__(self, sock, keyfile=None, certfile=None,
  12                   server_side=False, cert_reqs=CERT_NONE,
  13 -                 ssl_version=PROTOCOL_SSLv23, ca_certs=None,
  14 +                 ssl_version=PROTOCOL_TLSv1, ca_certs=None,
  15                   do_handshake_on_connect=True, *args, **kw):
  16          if not isinstance(sock, GreenSocket):
  17              sock = GreenSocket(sock)