U
    dR…f&	  ã                   @   s.   d Z ddlZddlmZ dZdZd	dd„ZdS )
zN
The codes in this ssl compat lib were inspired by urllib3.utils.ssl_ module.
é    N)Ú
SSLContextzšECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+HIGH:DH+HIGH:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+HIGH:RSA+3DES:!aNULL:!eNULL:!MD5z¤ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+HIGH:DH+HIGH:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+HIGH:RSA+3DES:!aNULL:!eNULL:!MD5:!DSS:!RC4Fc                 C   s2   | rt tjƒ}nt tjƒ}d|_|r.| |¡ |S )a:  
    The SSLContext has some default security options, you can disable them
    manually, for example::

        from thriftpy2.transport import _ssl
        import ssl
        context = _ssl.create_thriftpy_context()
        context.options &= ~ssl.OP_NO_SSLv3

    You can do the same to enable compression.
    F)r   ÚsslÚPROTOCOL_TLS_SERVERÚPROTOCOL_TLS_CLIENTÚcheck_hostnameÚset_ciphers)Úserver_sideÚciphersÚcontext© r   ú</tmp/pip-unpacked-wheel-jqs7l_7o/thriftpy2/transport/_ssl.pyÚcreate_thriftpy_context+   s    

r   )FN)Ú__doc__r   r   ÚDEFAULT_CIPHERSZRESTRICTED_SERVER_CIPHERSr   r   r   r   r   Ú<module>   s   ÿÿ