Path: csiph.com!newsfeed.hal-mli.net!feeder3.hal-mli.net!newsfeed.hal-mli.net!feeder1.hal-mli.net!newsfeed.xs4all.nl!newsfeed3a.news.xs4all.nl!xs4all!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.003 X-Spam-Evidence: '*H*': 0.99; '*S*': 0.00; '__init__': 0.09; 'host,': 0.09; 'subject:version': 0.09; 'cc:addr:python-list': 0.11; 'def': 0.12; '-tkc': 0.16; 'experiments': 0.16; 'from:addr:python.list': 0.16; 'from:addr:tim.thechases.com': 0.16; 'from:name:tim chase': 0.16; 'port)': 0.16; 'port))': 0.16; 'self.file': 0.16; 'self.port': 0.16; 'self.sock': 0.16; 'self.sslobj': 0.16; 'subject:SSL': 0.16; 'wrote:': 0.18; 'cc:addr:python.org': 0.22; 'specify': 0.24; 'cc:2**0': 0.24; 'cc:no real name:2**0': 0.24; 'skip:" 30': 0.26; 'subject:/': 0.26; 'header:In-Reply-To:1': 0.27; 'host': 0.29; 'file': 0.32; 'class': 0.32; 'could': 0.34; 'skip:s 30': 0.35; 'something': 0.35; 'version': 0.36; 'charset :us-ascii': 0.36; 'subject:?': 0.36; 'error.': 0.37; 'skip:p 20': 0.39; 'how': 0.40; 'tell': 0.60; 'show': 0.63; 'skip:r 30': 0.69; 'received:50.22': 0.84; 'edwards': 0.91 Date: Wed, 9 Apr 2014 15:26:22 -0500 From: Tim Chase To: Grant Edwards Subject: Re: imaplib: how to specify SSL/TLS protocol version? In-Reply-To: References: X-Mailer: Claws Mail 3.8.1 (GTK+ 2.24.10; x86_64-pc-linux-gnu) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - boston.accountservergroup.com X-AntiAbuse: Original Domain - python.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - tim.thechases.com X-Get-Message-Sender-Via: boston.accountservergroup.com: authenticated_id: tim@thechases.com Cc: python-list@python.org X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 53 NNTP-Posting-Host: 2001:888:2000:d::a6 X-Trace: 1397075181 news.xs4all.nl 2909 [2001:888:2000:d::a6]:53233 X-Complaints-To: abuse@xs4all.nl Xref: csiph.com comp.lang.python:69980 On 2014-04-09 20:12, Grant Edwards wrote: > File "/usr/lib64/python2.7/imaplib.py", line 1148, in __init__ > IMAP4.__init__(self, host, port) > SSLError: [Errno 1] _ssl.c:1419: error:1408F10B:SSL > routines:SSL3_GET_RECORD:wrong version number > > Experiments show that when calling ssl.wrap_socket() I have to > specify ssl_version=PROTOCOL_TLSv1 to avoid the above error. > > How do I tell imaplib to use TLS1 instead of SSL3? Sounds like you'd need to make a subclass, something like class IMAP4_TLS(imaplib.IMAP4_SSL): def open(self, host="", port=IMAP4_SSL_PORT): self.host = host self.port = port self.sock = socket.create_connection((host, port)) self.sslobj = ssl.wrap_socket( self.sock, self.keyfile, self.certfile, ssl_version=PROTOCOL_TLSv1, ) self.file = self.sslobj.makefile('rb') Alternatively, you could genericify it something like class IMAP4_TLS(imaplib.IMAP4_SSL): def open(self, host="", port=IMAP4_SSL_PORT, ssl_version=PROTOCOL_SSLv23, ): self.host = host self.port = port self.sock = socket.create_connection((host, port)) self.sslobj = ssl.wrap_socket( self.sock, self.keyfile, self.certfile, ssl_version=ssl_version, ) self.file = self.sslobj.makefile('rb') and then call .open(..., ssl_version=PROTOCOL_TLSv1) or specify any other protocol that you need. -tkc