E5Network/E5SslErrorHandler.py

changeset 6607
5237edb40b88
parent 6048
82ad8ec9548c
child 6613
7b7523fd4c80
diff -r 593488c37f2c -r 5237edb40b88 E5Network/E5SslErrorHandler.py
--- a/E5Network/E5SslErrorHandler.py	Fri Dec 07 20:25:59 2018 +0100
+++ b/E5Network/E5SslErrorHandler.py	Sat Dec 08 16:30:16 2018 +0100
@@ -57,7 +57,10 @@
                     caList.append(cert)
         sslCfg = QSslConfiguration.defaultConfiguration()
         sslCfg.setCaCertificates(caList)
-        sslCfg.setProtocol(QSsl.AnyProtocol)
+        try:
+            sslCfg.setProtocol(QSsl.TlsV1_1OrLater)
+        except AttributeError:
+            sslCfg.setProtocol(QSsl.SecureProtocols)
         try:
             sslCfg.setSslOption(QSsl.SslOptionDisableCompression, True)
         except AttributeError:
@@ -166,7 +169,15 @@
                     for cert in caNew:
                         caList.append(cert)
                     sslCfg.setCaCertificates(caList)
-                    sslCfg.setProtocol(QSsl.AnyProtocol)
+                    try:
+                        sslCfg.setProtocol(QSsl.TlsV1_1OrLater)
+                    except AttributeError:
+                        sslCfg.setProtocol(QSsl.SecureProtocols)
+                    try:
+                        sslCfg.setSslOption(QSsl.SslOptionDisableCompression,
+                                            True)
+                    except AttributeError:
+                        pass
                     QSslConfiguration.setDefaultConfiguration(sslCfg)
                     
                     certificateDict = {}

eric ide

mercurial