Ursula demo now uses only TLS1.2.

pull/178/head
jMyles 2018-03-07 14:23:34 -08:00
parent 42870a25f0
commit aa23f7855e
1 changed files with 3 additions and 1 deletions

View File

@ -13,6 +13,7 @@ from hendrix.deploy.ssl import HendrixDeployTLS
from hendrix.facilities.services import ExistingKeyTLSContextFactory
from nkms.characters import Ursula
from OpenSSL.crypto import X509
from OpenSSL.SSL import TLSv1_2_METHOD
from nkms.crypto.api import generate_self_signed_certificate
@ -29,7 +30,8 @@ deployer = HendrixDeployTLS("start",
key=private_key,
cert=X509.from_cryptography(cert),
context_factory=ExistingKeyTLSContextFactory,
context_factory_kwargs={"curve_name": "prime256v1"})
context_factory_kwargs={"curve_name": "prime256v1",
"sslmethod": TLSv1_2_METHOD})
try:
deployer.run()