Skip to content

gh-80665: Add TLS v1.3 cipher suite set function #31607

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
sanchayanghosh wants to merge 3 commits into
base: main
Choose a base branch
from
Open

gh-80665: Add TLS v1.3 cipher suite set function #31607

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
cd620f9
Add TLS v1.3 cipher suite set function
sanchayanghosh Feb 27, 2022
5233db1
Merge branch 'main' into ssl_tls_13
serhiy-storchaka Feb 23, 2024
bc186c8
Merge branch 'main' into ssl_tls_13
serhiy-storchaka Feb 23, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 21 additions & 0 deletions Modules/_ssl.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3288,6 +3288,26 @@ _ssl__SSLContext_set_ciphers_impl(PySSLContext *self, const char *cipherlist)
Py_RETURN_NONE;
}


static PyObject *
_ssl_SSLContext_set_ciphers_tls3_impl(PySSLContext *self, const char* cipherlist)
{
int ret = SSL_CTX_set_ciphersuites(self->ctx, cipherlist);
if (ret == 0)
{
/* Similar to TLS 1.2 cipher suites, and OpenSSL versions, otherwise the error can be
* reported again.
*/
ERR_clear_error();
PyErr_SetString(get_state_ctx(self)->PySSLErrorObject, "No TLSv1.3 cipher could be selected");
return NULL;
}

Py_RETURN_NONE;
}



/*[clinic input]
_ssl._SSLContext.get_ciphers
[clinic start generated code]*/
Expand Down Expand Up @@ -5001,6 +5021,7 @@ static struct PyMethodDef context_methods[] = {
_SSL__SSLCONTEXT__WRAP_SOCKET_METHODDEF
_SSL__SSLCONTEXT__WRAP_BIO_METHODDEF
_SSL__SSLCONTEXT_SET_CIPHERS_METHODDEF
_SSL__SSLCONTEXT_SET_CIPHERSUITES_TLSV13_METHODDEF
_SSL__SSLCONTEXT__SET_ALPN_PROTOCOLS_METHODDEF
_SSL__SSLCONTEXT_LOAD_CERT_CHAIN_METHODDEF
_SSL__SSLCONTEXT_LOAD_DH_PARAMS_METHODDEF
Expand Down
40 changes: 40 additions & 0 deletions Modules/clinic/_ssl.c.h
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.