From: Andrew M. Kuchling <amk@amk.ca>
Date: Sat, 10 Jul 2004 21:36:55 +0000 (+0000)
Subject: [Patch #909007] Enable a bunch of safe bug workarounds in OpenSSL, for compatibility... 
X-Git-Tag: v2.4a2~324
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=27d3dda7f16257fe9c9d67292aca8c6fbaa2a84e;p=python

[Patch #909007] Enable a bunch of safe bug workarounds in OpenSSL, for compatibility with various broken SSL implementations out there.
---

diff --git a/Modules/_ssl.c b/Modules/_ssl.c
index 76cd7ddc2e..906a72ac8a 100644
--- a/Modules/_ssl.c
+++ b/Modules/_ssl.c
@@ -220,6 +220,7 @@ newPySSLObject(PySocketSockObject *Sock, char *key_file, char *cert_file)
 		ret = SSL_CTX_use_certificate_chain_file(self->ctx,
 						       cert_file);
 		Py_END_ALLOW_THREADS
+		SSL_CTX_set_options(self->ctx, SSL_OP_ALL); /* ssl compatibility */
 		if (ret < 1) {
 			errstr = "SSL_CTX_use_certificate_chain_file error";
 			goto fail;