diff --git a/setstatus.py b/setstatus.py index 0f13580..e19ffa2 100755 --- a/setstatus.py +++ b/setstatus.py @@ -67,9 +67,8 @@ def main(): context = ssl.create_default_context(ssl.Purpose.SERVER_AUTH, cafile=SERVER_CERT) - context.options &= ~ssl.PROTOCOL_TLS - context.verify_mode = ssl.CERT_OPTIONAL - # context.set_ciphers('HIGHT:!aNULL:!RC4:!DSS') + context.set_ciphers('EECDH+AESGCM') # only ciphers for tls 1.2 and 1.3 + context.options |= getattr(ssl._ssl, 'OP_NO_COMPRESSION', 0) context.load_cert_chain(certfile=CLIENT_CERT, keyfile=CLIENT_KEY) print('SSL context created')