src/eric7/EricNetwork/EricSslUtilities.py

branch
eric7
changeset 9221
bf71ee032bb4
parent 9209
b99e7fd55fd3
child 9470
34f2493c1d3f
equal deleted inserted replaced
9220:e9e7eca7efee 9221:bf71ee032bb4
11 def initSSL(): 11 def initSSL():
12 """ 12 """
13 Function to initialize some global SSL stuff. 13 Function to initialize some global SSL stuff.
14 """ 14 """
15 blacklist = [ 15 blacklist = [
16 "SRP-AES-256-CBC-SHA", # open to MitM 16 "SRP-AES-256-CBC-SHA", # open to MitM
17 "SRP-AES-128-CBC-SHA", # open to MitM 17 "SRP-AES-128-CBC-SHA", # open to MitM
18 ] 18 ]
19 19
20 try: 20 try:
21 from PyQt6.QtNetwork import QSslConfiguration 21 from PyQt6.QtNetwork import QSslConfiguration
22 except ImportError: 22 except ImportError:
23 # no SSL available, so there is nothing to initialize 23 # no SSL available, so there is nothing to initialize
24 return 24 return
25 25
26 strongCiphers = [c for c in QSslConfiguration.supportedCiphers() 26 strongCiphers = [
27 if c.name() not in blacklist and c.usedBits() >= 128] 27 c
28 for c in QSslConfiguration.supportedCiphers()
29 if c.name() not in blacklist and c.usedBits() >= 128
30 ]
28 defaultSslConfiguration = QSslConfiguration.defaultConfiguration() 31 defaultSslConfiguration = QSslConfiguration.defaultConfiguration()
29 defaultSslConfiguration.setCiphers(strongCiphers) 32 defaultSslConfiguration.setCiphers(strongCiphers)
30 QSslConfiguration.setDefaultConfiguration(defaultSslConfiguration) 33 QSslConfiguration.setDefaultConfiguration(defaultSslConfiguration)

eric ide

mercurial