Alex-Devera/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-10-13 20:09:13 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

fix: Default version of SSL/TLS

Browse source 
To fix the problem, we should replace the deprecated ssl.wrap_socket method with a more secure and modern approach. The recommended way is to use ssl.SSLContext or ssl.create_default_context to ensure that a secure protocol like TLS 1.2 or above is used.

Create an SSLContext object and set its minimum_version to ssl.TLSVersion.TLSv1_2.
Wrap the server socket using this context instead of ssl.wrap_socket.
This commit is contained in:
gitworkflows 2024-10-09 05:48:25 +06:00 committed by GitHub
parent 34eb7d6e72
commit 671997d7a4
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
docker/ciscoasa/dist/asa_server.py vendored
View file

@ -290,7 +290,10 @@ if __name__ == '__main__':
if not cert:
import gencert
cert = gencert.gencert()
httpd.socket = ssl.wrap_socket(httpd.socket, certfile=cert, server_side=True)
context = ssl.create_default_context(ssl.Purpose.CLIENT_AUTH)
context.minimum_version = ssl.TLSVersion.TLSv1_2
context.load_cert_chain(certfile=cert)
httpd.socket = context.wrap_socket(httpd.socket, server_side=True)
logger.info('Starting server on port {:d}/tcp, use <Ctrl-C> to stop'.format(port))
hpfl.log('info', 'Starting server on port {:d}/tcp, use <Ctrl-C> to stop'.format(port))