equal
deleted
inserted
replaced
423 # This error occurs when the client and server don't share a |
423 # This error occurs when the client and server don't share a |
424 # common/supported SSL/TLS protocol. We've disabled SSLv2 and SSLv3 |
424 # common/supported SSL/TLS protocol. We've disabled SSLv2 and SSLv3 |
425 # outright. Hopefully the reason for this error is that we require |
425 # outright. Hopefully the reason for this error is that we require |
426 # TLS 1.1+ and the server only supports TLS 1.0. Whatever the |
426 # TLS 1.1+ and the server only supports TLS 1.0. Whatever the |
427 # reason, try to emit an actionable warning. |
427 # reason, try to emit an actionable warning. |
428 if e.reason == 'UNSUPPORTED_PROTOCOL': |
428 if e.reason in ( |
|
429 'UNSUPPORTED_PROTOCOL', |
|
430 'TLSV1_ALERT_PROTOCOL_VERSION', |
|
431 ): |
429 # We attempted TLS 1.0+. |
432 # We attempted TLS 1.0+. |
430 if settings[b'minimumprotocol'] == b'tls1.0': |
433 if settings[b'minimumprotocol'] == b'tls1.0': |
431 # We support more than just TLS 1.0+. If this happens, |
434 # We support more than just TLS 1.0+. If this happens, |
432 # the likely scenario is either the client or the server |
435 # the likely scenario is either the client or the server |
433 # is really old. (e.g. server doesn't support TLS 1.0+ or |
436 # is really old. (e.g. server doesn't support TLS 1.0+ or |