[openstack-dev] No PROTOCOL_SSLv3 in Python 2.7 in Sid since 3 days

Jeremy Stanley fungi at yuggoth.org
Fri Nov 21 16:51:03 UTC 2014


On 2014-11-21 09:38:00 -0500 (-0500), Doug Hellmann wrote:
> The patch drops support entirely, but as Brant points out that
> isn’t backwards-compatible. I’d be interested to hear from the
> security team about whether the security issues trump the
> backwards compatibility issues here or if we should maintain
> optional support (that is, allow v3 if we detect that we can use
> it because the symbol is present). 
> 
> Thomas, can you get one or two of the security team to comment on
> the patch?

The discussion in https://launchpad.net/bugs/1381365 is relevant to
this topic.
-- 
Jeremy Stanley



More information about the OpenStack-dev mailing list