Re: certbot segfault

[Joerg Sonnenberger <joerg%bec.de@localhost>]

On Fri, Nov 11, 2016 at 08:06:48AM +0000, coypu%SDF.ORG@localhost wrote:
> On Thu, Nov 10, 2016 at 11:06:48PM +0100, Stefan Hertenberger wrote:
> > On my system the following command segfaults too
> > 
> > # printf "import requests\nr = requests.get('https://www.netbsd.org/')\n" |
> > python2.7
> > 
> > after a bit of testing i can nail it down to security/py-ndg_httpsclient. if
> > i remove the package, the previous command works without segfault.
> > 
> > regards
> > 
> > Stefan
> 
> ndg/httpsclient/https.py
> 
>     @cvar default_ssl_method: default SSL method used if no SSL context is
>     explicitly set - defaults to version 2/3.
>     @type default_ssl_method: int
>     """
>     default_port = HTTPS_PORT
>     default_ssl_method = SSL.SSLv23_METHOD
> 
> That sets a global default to SSLv2/3????

SSLv23_METHOD is a bit of a misname. It means "pick whatevere you can
agree on with the other side".

Joerg