Add option to force SSL/TLS version #98

Closed
hannesg opened this Issue Oct 15, 2012 · 2 comments

Projects

None yet

4 participants

@hannesg
hannesg commented Oct 15, 2012

Hi

I currently have to work with a load balancer that only supports SSLv3 correctly. With curl I can use the "-3" switch to enforce using that, but httpie doesn't have an option for that. Please add a commandline switch to forcibly select the SSL/TLS version to use.

Thank You
Hannes

@gcapizzi

Requests (the library used by HTTPie to make HTTP requests) doesn't allow to specify the SSL version, it selects one automatically...

@jtka
jtka commented Oct 21, 2015

If web server is configured only allow TLS1.2 (e.g. in apache SSLProtocol +TLSv1.2), requests fails:

http https://webserver.localhost
http: error: SSLError: [SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:600) while doing GET request to URL: https://webserver.localhost/

So, it would be nice to have similar option as curl to select SSL/TLS protocol version:
-2, --sslv2 Use SSLv2 (SSL)
-3, --sslv3 Use SSLv3 (SSL)
-1, --tlsv1 Use => TLSv1 (SSL)
--tlsv1.0 Use TLSv1.0 (SSL)
--tlsv1.1 Use TLSv1.1 (SSL)
--tlsv1.2 Use TLSv1.2 (SSL)

It should be possible to change the SSL version:
https://lukasa.co.uk/2013/01/Choosing_SSL_Version_In_Requests/

@jakubroztocil jakubroztocil removed the upstream label Mar 2, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment