Thursday, October 30, 2014

Re: pycurl and SSLv3

> Den 30/10/2014 kl. 15.50 skrev john <johnf@jfcomputer.com>:
>
> On the server side of my Django website I use pycurl (version 7.20.x) to connect to authorize.net (to send credit card info). On Nov 4 Authorize.net will turn off SSLv3. So I'm wondering if my use pycurl will continue to work. To be honest I haven't thought about it much since the pycurl seem to take care of everything that Authorize.net required. Now I'm questioning if pycurl will continue to work and if I need to change anything - what do I chan.
>
> c=pycurl.Curl()
> c.setopt(c.URL, GatewayURL)
> c.setopt(c.POST, TRUE)
> c.setopt(c.SSL_VERIFYPEER, FALSE)


This would depend on the version of libcurl on your server, and ultimately on the version of libssl.

I assume authorize.net will only accept TLS, so just force the SSL version and test if it works. Something like this should do:

c.setopt(c.SSLVERSION, c.CURL_SSLVERSION_TLSv1_2)


Erik

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/D25E117E-82AF-4076-86AE-342FC7FD2571%40cederstrand.dk.
For more options, visit https://groups.google.com/d/optout.

No comments:

Post a Comment