[Patch #909007] Enable a bunch of safe bug workarounds in OpenSSL, for compatibility...

diff --git a/Modules/_ssl.c b/Modules/_ssl.c
index 76cd7ddc2e15153882fe49bf442eaf66ccdecf6f..906a72ac8a1e7f0ae139e455ed5be8bdc44ffcd6 100644 (file)
--- a/Modules/_ssl.c
+++ b/Modules/_ssl.c
@@ -220,6 +220,7 @@ newPySSLObject(PySocketSockObject *Sock, char *key_file, char *cert_file)
                ret = SSL_CTX_use_certificate_chain_file(self->ctx,
                                                       cert_file);
                Py_END_ALLOW_THREADS
+               SSL_CTX_set_options(self->ctx, SSL_OP_ALL); /* ssl compatibility */
                if (ret < 1) {
                        errstr = "SSL_CTX_use_certificate_chain_file error";
                        goto fail;