From 5c12dc2cba952395c0480d8b6a984a760e125402 Mon Sep 17 00:00:00 2001 From: Jarrod Johnson Date: Fri, 8 Jun 2018 10:15:38 -0400 Subject: [PATCH] Do not require exactly TLSv1.0 This was breaking TLSv1.2. --- confluent_client/confluent/client.py | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/confluent_client/confluent/client.py b/confluent_client/confluent/client.py index 6b3ae129..2cc92996 100644 --- a/confluent_client/confluent/client.py +++ b/confluent_client/confluent/client.py @@ -261,8 +261,7 @@ class Command(object): certreqs = ssl.CERT_NONE knownhosts = True self.connection = ssl.wrap_socket(self.connection, ca_certs=cacert, - cert_reqs=certreqs, - ssl_version=ssl.PROTOCOL_TLSv1) + cert_reqs=certreqs) if knownhosts: certdata = self.connection.getpeercert(binary_form=True) fingerprint = 'sha512$' + hashlib.sha512(certdata).hexdigest()