11 def initSSL(): |
11 def initSSL(): |
12 """ |
12 """ |
13 Function to initialize some global SSL stuff. |
13 Function to initialize some global SSL stuff. |
14 """ |
14 """ |
15 blacklist = [ |
15 blacklist = [ |
16 "SRP-AES-256-CBC-SHA", # open to MitM |
16 "SRP-AES-256-CBC-SHA", # open to MitM |
17 "SRP-AES-128-CBC-SHA", # open to MitM |
17 "SRP-AES-128-CBC-SHA", # open to MitM |
18 ] |
18 ] |
19 |
19 |
20 try: |
20 try: |
21 from PyQt6.QtNetwork import QSslConfiguration |
21 from PyQt6.QtNetwork import QSslConfiguration |
22 except ImportError: |
22 except ImportError: |
23 # no SSL available, so there is nothing to initialize |
23 # no SSL available, so there is nothing to initialize |
24 return |
24 return |
25 |
25 |
26 strongCiphers = [c for c in QSslConfiguration.supportedCiphers() |
26 strongCiphers = [ |
27 if c.name() not in blacklist and c.usedBits() >= 128] |
27 c |
|
28 for c in QSslConfiguration.supportedCiphers() |
|
29 if c.name() not in blacklist and c.usedBits() >= 128 |
|
30 ] |
28 defaultSslConfiguration = QSslConfiguration.defaultConfiguration() |
31 defaultSslConfiguration = QSslConfiguration.defaultConfiguration() |
29 defaultSslConfiguration.setCiphers(strongCiphers) |
32 defaultSslConfiguration.setCiphers(strongCiphers) |
30 QSslConfiguration.setDefaultConfiguration(defaultSslConfiguration) |
33 QSslConfiguration.setDefaultConfiguration(defaultSslConfiguration) |