aboutsummaryrefslogtreecommitdiffstats
path: root/libpathod/pathod_cmdline.py
diff options
context:
space:
mode:
Diffstat (limited to 'libpathod/pathod_cmdline.py')
-rw-r--r--libpathod/pathod_cmdline.py12
1 files changed, 5 insertions, 7 deletions
diff --git a/libpathod/pathod_cmdline.py b/libpathod/pathod_cmdline.py
index f1855e23..c9272249 100644
--- a/libpathod/pathod_cmdline.py
+++ b/libpathod/pathod_cmdline.py
@@ -139,12 +139,10 @@ def args_pathod(argv, stdout_=sys.stdout, stderr_=sys.stderr):
"""
)
group.add_argument(
- "--ssl-version", dest="ssl_version", type=str, default=tcp.SSL_DEFAULT_VERSION,
- choices=tcp.SSL_VERSIONS.keys(),
- help=""""
- Use a specified protocol:
- TLSv1.2, TLSv1.1, TLSv1, SSLv3, SSLv2, SSLv23.
- Default to SSLv23."""
+ "--ssl-version", dest="ssl_version", type=str, default="secure",
+ choices=tcp.sslversion_choices.keys(),
+ help="Set supported SSL/TLS versions. "
+ "SSLv2, SSLv3 and 'all' are INSECURE. Defaults to secure, which is TLS1.0+."
)
group = parser.add_argument_group(
@@ -182,7 +180,7 @@ def args_pathod(argv, stdout_=sys.stdout, stderr_=sys.stderr):
args = parser.parse_args(argv[1:])
- args.ssl_version = tcp.SSL_VERSIONS[args.ssl_version]
+ args.ssl_version, args.ssl_options = tcp.sslversion_choices[args.ssl_version]
certs = []
for i in args.ssl_certs: