Create ssl contexts only once
This commit is contained in:
parent
8ed7d0385d
commit
08a0a63631
1 changed files with 5 additions and 0 deletions
|
@ -18,6 +18,9 @@ class CryptConnectionManager:
|
||||||
else:
|
else:
|
||||||
self.openssl_bin = "openssl"
|
self.openssl_bin = "openssl"
|
||||||
|
|
||||||
|
self.context_client = None
|
||||||
|
self.context_server = None
|
||||||
|
|
||||||
self.openssl_conf_template = "src/lib/openssl/openssl.cnf"
|
self.openssl_conf_template = "src/lib/openssl/openssl.cnf"
|
||||||
self.openssl_conf = config.data_dir + "/openssl.cnf"
|
self.openssl_conf = config.data_dir + "/openssl.cnf"
|
||||||
|
|
||||||
|
@ -47,6 +50,8 @@ class CryptConnectionManager:
|
||||||
]
|
]
|
||||||
|
|
||||||
def createSslContexts(self):
|
def createSslContexts(self):
|
||||||
|
if self.context_server and self.context_client:
|
||||||
|
return False
|
||||||
ciphers = "ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-GCM-SHA256:AES128-SHA256:AES256-SHA:"
|
ciphers = "ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-GCM-SHA256:AES128-SHA256:AES256-SHA:"
|
||||||
ciphers += "!aNULL:!eNULL:!EXPORT:!DSS:!DES:!RC4:!3DES:!MD5:!PSK"
|
ciphers += "!aNULL:!eNULL:!EXPORT:!DSS:!DES:!RC4:!3DES:!MD5:!PSK"
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue