Merge pull request ZeroNetX#170 from zeronet-conservancy/fix_ssl_version

fix default ssl version to be secure
marek22k · Sep 20, 2022 · 04fc791 · 04fc791
2 parents ed8c7a8 + 8132457
commit 04fc791
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/src/util/helper.py b/src/util/helper.py
@@ -209,7 +209,11 @@ def httpRequest(url, as_file=False):
 
         conn = http.client.HTTPSConnection(host)
         sock = socket.create_connection((conn.host, conn.port), conn.timeout, conn.source_address)
-        conn.sock = ssl.wrap_socket(sock, conn.key_file, conn.cert_file)
+
+        context = ssl.create_default_context()
+        context.minimum_version = ssl.TLSVersion.TLSv1_2
+
+        conn.sock = context.wrap_socket(sock, conn.key_file, conn.cert_file)
         conn.request("GET", request)
         response = conn.getresponse()
         if response.status in [301, 302, 303, 307, 308]: