| 2 | |
| 3 | |
| 4 | class TLSv1_3_BYPASS: |
| 5 | CIPHERS = [ |
| 6 | "ECDHE-ECDSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", |
| 7 | "ECDHE-ECDSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384", |
| 8 | "ECDHE-ECDSA-CHACHA20-POLY1305", "ECDHE-RSA-CHACHA20-POLY1305", |
| 9 | "ECDHE-RSA-AES128-SHA", "ECDHE-RSA-AES256-SHA", |
| 10 | "AES128-GCM-SHA256", "AES256-GCM-SHA384", "AES128-SHA", "AES256-SHA", "DES-CBC3-SHA", |
| 11 | "TLS_AES_128_GCM_SHA256", "TLS_AES_256_GCM_SHA384", "TLS_CHACHA20_POLY1305_SHA256", |
| 12 | "TLS_AES_128_CCM_SHA256", "TLS_AES_256_CCM_8_SHA256" |
| 13 | ] |
| 14 | |
| 15 | @staticmethod |
| 16 | def create_ssl_context(): |
| 17 | ssl_context = ssl.create_default_context(ssl.Purpose.SERVER_AUTH) |
| 18 | ssl_context.set_ciphers(':'.join(TLSv1_3_BYPASS.CIPHERS)) |
| 19 | ssl_context.set_ecdh_curve("prime256v1") |
| 20 | ssl_context.minimum_version = ssl.TLSVersion.TLSv1_3 |
| 21 | ssl_context.maximum_version = ssl.TLSVersion.TLSv1_3 |
| 22 | return ssl_context |
nothing calls this directly
no outgoing calls
no test coverage detected