From e593ceaaf2acc7ae22a1086fc34e915dbd88413c Mon Sep 17 00:00:00 2001 From: "J. Nick Koston" Date: Sat, 13 May 2023 19:16:11 -0500 Subject: [PATCH] Fix sslv2/sslv3 with unverified connections (#93037) In #90191 we use the same ssl context for httpx now to avoid a memory leak, but httpx previously allowed sslv2/sslv3 for unverified connections This reverts to the behavior before #90191 --- homeassistant/util/ssl.py | 2 -- 1 file changed, 2 deletions(-) diff --git a/homeassistant/util/ssl.py b/homeassistant/util/ssl.py index aa1b933e0ae..664d6f15650 100644 --- a/homeassistant/util/ssl.py +++ b/homeassistant/util/ssl.py @@ -73,8 +73,6 @@ def create_no_verify_ssl_context( https://github.com/aio-libs/aiohttp/blob/33953f110e97eecc707e1402daa8d543f38a189b/aiohttp/connector.py#L911 """ sslcontext = ssl.SSLContext(ssl.PROTOCOL_TLS_CLIENT) - sslcontext.options |= ssl.OP_NO_SSLv2 - sslcontext.options |= ssl.OP_NO_SSLv3 sslcontext.check_hostname = False sslcontext.verify_mode = ssl.CERT_NONE with contextlib.suppress(AttributeError):