2
0
mirror of https://github.com/xcat2/confluent.git synced 2024-11-26 11:30:23 +00:00

Do not require exactly TLSv1.0

This was breaking TLSv1.2.
This commit is contained in:
Jarrod Johnson 2018-06-08 10:15:38 -04:00
parent cdb20c0302
commit 5c12dc2cba

View File

@ -261,8 +261,7 @@ class Command(object):
certreqs = ssl.CERT_NONE
knownhosts = True
self.connection = ssl.wrap_socket(self.connection, ca_certs=cacert,
cert_reqs=certreqs,
ssl_version=ssl.PROTOCOL_TLSv1)
cert_reqs=certreqs)
if knownhosts:
certdata = self.connection.getpeercert(binary_form=True)
fingerprint = 'sha512$' + hashlib.sha512(certdata).hexdigest()