Fix code scanning alert no. 13: Default version of SSL/TLS may be insecure

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
This commit is contained in:
Jay Lee
2024-11-18 12:00:13 -05:00
committed by GitHub
parent f859d5eb26
commit 3ed60c95c2

View File

@@ -564,7 +564,9 @@ class ProxiedHttpClient(HttpClient):
# Trivial setup for ssl socket.
sslobj = None
if ssl is not None:
sslobj = ssl.wrap_socket(p_sock, None, None)
context = ssl.SSLContext(ssl.PROTOCOL_TLS)
context.minimum_version = ssl.TLSVersion.TLSv1_2
sslobj = context.wrap_socket(p_sock, server_hostname=uri.host)
else:
sock_ssl = socket.ssl(p_sock, None, Nonesock_)
sslobj = http.client.FakeSocket(p_sock, sock_ssl)