from nss.error import NSPRError # Query and print supported SSL Library Versions print("supported ssl version (asString): %s" % (ssl.get_supported_ssl_version_range(repr_kind=nss.AsString), )) print("supported ssl version (asEnumName): %s" % (ssl.get_supported_ssl_version_range(repr_kind=nss.AsEnumName), )) print("supported ssl version (asEnum): %s" % (ssl.get_supported_ssl_version_range(), )) # Query and print default SSL Library Versions print() print("default ssl version (asString): %s" % (ssl.get_default_ssl_version_range(repr_kind=nss.AsString), )) print("default ssl version (asEnumName): %s" % (ssl.get_default_ssl_version_range(repr_kind=nss.AsEnumName), )) print("default ssl version (asEnum): %s" % (ssl.get_default_ssl_version_range(), )) # Equivalent calls on a SSL Socket sock = ssl.SSLSocket() sock.set_ssl_option(ssl.SSL_SECURITY, True) print() print("Initial Socket version range") print("socket ssl version (asString): %s" % (sock.get_ssl_version_range(repr_kind=nss.AsString), )) print("socket ssl version (asEnumName): %s" %
# Query and print supported SSL Library Versions print("supported ssl version (asString): %s" % \ (ssl.get_supported_ssl_version_range(repr_kind=nss.AsString),)) print("supported ssl version (asEnumName): %s" % \ (ssl.get_supported_ssl_version_range(repr_kind=nss.AsEnumName),)) print("supported ssl version (asEnum): %s" % \ (ssl.get_supported_ssl_version_range(),)) # Query and print default SSL Library Versions print() print("default ssl version (asString): %s" % \ (ssl.get_default_ssl_version_range(repr_kind=nss.AsString),)) print("default ssl version (asEnumName): %s" % \ (ssl.get_default_ssl_version_range(repr_kind=nss.AsEnumName),)) print("default ssl version (asEnum): %s" % \ (ssl.get_default_ssl_version_range(),)) # Equivalent calls on a SSL Socket sock = ssl.SSLSocket() sock.set_ssl_option(ssl.SSL_SECURITY, True) print() print("Initial Socket version range") print("socket ssl version (asString): %s" % \ (sock.get_ssl_version_range(repr_kind=nss.AsString),)) print("socket ssl version (asEnumName): %s" % \
# Perform basic configuration and setup if options.use_ssl: nss.nss_init(options.db_name) else: nss.nss_init_nodb() ssl.set_domestic_policy() nss.set_password_callback(password_callback) min_ssl_version, max_ssl_version = ssl.get_supported_ssl_version_range( repr_kind=nss.AsString) print("Supported SSL version range: min=%s, max=%s" % (min_ssl_version, max_ssl_version)) min_ssl_version, max_ssl_version = ssl.get_default_ssl_version_range( repr_kind=nss.AsString) print("Default SSL version range: min=%s, max=%s" % (min_ssl_version, max_ssl_version)) if options.min_ssl_version is not None or options.max_ssl_version is not None: if options.min_ssl_version is not None: min_ssl_version = options.min_ssl_version if options.max_ssl_version is not None: max_ssl_version = options.max_ssl_version print("Setting default SSL version range: min=%s, max=%s" % (min_ssl_version, max_ssl_version)) ssl.set_default_ssl_version_range(min_ssl_version, max_ssl_version) min_ssl_version, max_ssl_version = ssl.get_default_ssl_version_range(
# Perform basic configuration and setup if options.use_ssl: nss.nss_init(options.db_name) else: nss.nss_init_nodb() ssl.set_domestic_policy() nss.set_password_callback(password_callback) min_ssl_version, max_ssl_version = \ ssl.get_supported_ssl_version_range(repr_kind=nss.AsString) print("Supported SSL version range: min=%s, max=%s" % \ (min_ssl_version, max_ssl_version)) min_ssl_version, max_ssl_version = \ ssl.get_default_ssl_version_range(repr_kind=nss.AsString) print("Default SSL version range: min=%s, max=%s" % \ (min_ssl_version, max_ssl_version)) if options.min_ssl_version is not None or \ options.max_ssl_version is not None: if options.min_ssl_version is not None: min_ssl_version = options.min_ssl_version if options.max_ssl_version is not None: max_ssl_version = options.max_ssl_version print("Setting default SSL version range: min=%s, max=%s" % \ (min_ssl_version, max_ssl_version)) ssl.set_default_ssl_version_range(min_ssl_version, max_ssl_version)