46 @param context security context object |
46 @param context security context object |
47 @type SecurityContext |
47 @type SecurityContext |
48 @param config dictionary with configuration data |
48 @param config dictionary with configuration data |
49 @type dict |
49 @type dict |
50 """ |
50 """ |
51 if config and "insecure_ssl_protocol_versions" in config: |
51 insecureProtocolVersions = ( |
52 insecureProtocolVersions = config["insecure_ssl_protocol_versions"] |
52 config["insecure_ssl_protocol_versions"] |
53 else: |
53 if config and "insecure_ssl_protocol_versions" in config else |
54 insecureProtocolVersions = SecurityDefaults[ |
54 SecurityDefaults["insecure_ssl_protocol_versions"] |
55 "insecure_ssl_protocol_versions"] |
55 ) |
56 |
56 |
57 if context.callFunctionNameQual == 'ssl.wrap_socket': |
57 if context.callFunctionNameQual == 'ssl.wrap_socket': |
58 if context.checkCallArgValue('ssl_version', insecureProtocolVersions): |
58 if context.checkCallArgValue('ssl_version', insecureProtocolVersions): |
59 reportError( |
59 reportError( |
60 context.getLinenoForCallArg('ssl_version') - 1, |
60 context.getLinenoForCallArg('ssl_version') - 1, |
107 @param context security context object |
107 @param context security context object |
108 @type SecurityContext |
108 @type SecurityContext |
109 @param config dictionary with configuration data |
109 @param config dictionary with configuration data |
110 @type dict |
110 @type dict |
111 """ |
111 """ |
112 if config and "insecure_ssl_protocol_versions" in config: |
112 insecureProtocolVersions = ( |
113 insecureProtocolVersions = config["insecure_ssl_protocol_versions"] |
113 config["insecure_ssl_protocol_versions"] |
114 else: |
114 if config and "insecure_ssl_protocol_versions" in config else |
115 insecureProtocolVersions = SecurityDefaults[ |
115 SecurityDefaults["insecure_ssl_protocol_versions"] |
116 "insecure_ssl_protocol_versions"] |
116 ) |
117 |
117 |
118 for default in context.functionDefDefaultsQual: |
118 for default in context.functionDefDefaultsQual: |
119 val = default.split(".")[-1] |
119 val = default.split(".")[-1] |
120 if val in insecureProtocolVersions: |
120 if val in insecureProtocolVersions: |
121 reportError( |
121 reportError( |