Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PortalPy needs to be updated to use the newer python modules (2.7.9) that do not use SSLv3. #14

Open
danielsieger opened this issue May 19, 2015 · 1 comment

Comments

@danielsieger
Copy link

Python Release 2.7.9:
SLv3 has been disabled by default in httplib and its reverse dependencies due to the POODLE attack.
https://www.python.org/downloads/release/python-279/

ArcGIS Server and Portal for ArcGIS have already been upgraded to prevent issues due to the POODLE attack. The python libraries included in PortalPy include individual affected http modules. All micro releases of python (e.g. 2.7.8, 2.7.9) in a minor release line will be binary compatible and will just work if swapped in.

@ecaldwell
Copy link

Since portalpy doesn't bundle a specific version of python (or any of the affected modules), isn't this more simply a matter of adding a note recommending the usage of 2.7.9+ in the readme?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants