Message 318422 - Python tracker

➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author	yselivanov
Recipients	asvetlov, hynek, ned.deily, yselivanov
Date	2018-06-01.14:53:53
SpamBayes Score	-1.0
Marked as misclassified	Yes
Message-id	<1527864833.64.0.81473610881.issue33734@psf.upfronthosting.co.za>
In-reply-to

Content
I've ported asyncio's sslproto.py to uvloop and released a new major version of it yesterday. Hynek discovered that the default SSL handshake timeout (10 seconds currently) is too low, and that there's a critical code path that is broken because it assumes all SSL exceptions have an 'errno' attribute. The PR changes the default SSL handshake timeout to 60 seconds (as in nginx [1]) and fixes the AttributeError. IMO this should go into 3.7.0rc1. [1] https://docs.nginx.com/nginx/admin-guide/security-controls/terminating-ssl-tcp/#speeding-up-secure-tcp-connections

I've ported asyncio's sslproto.py to uvloop and released a new major version of it yesterday.  Hynek discovered that the default SSL handshake timeout (10 seconds currently) is too low, and that there's a critical code path that is broken because it assumes all SSL exceptions have an 'errno' attribute.

The PR changes the default SSL handshake timeout to 60 seconds (as in nginx [1]) and fixes the AttributeError.

IMO this should go into 3.7.0rc1.


[1] https://docs.nginx.com/nginx/admin-guide/security-controls/terminating-ssl-tcp/#speeding-up-secure-tcp-connections

History
Date	User	Action	Args
2018-06-01 14:53:53	yselivanov	set	recipients: + yselivanov, ned.deily, asvetlov, hynek
2018-06-01 14:53:53	yselivanov	set	messageid: <1527864833.64.0.81473610881.issue33734@psf.upfronthosting.co.za>
2018-06-01 14:53:53	yselivanov	link	issue33734 messages
2018-06-01 14:53:53	yselivanov	create