GHC 2019-02-16

3 comments.

, https://git.io/fh5CV in zmwangx/rust-ffmpeg
Thanks for the report. Fixed in a7ea073. I can't promise when I'll cut a new release though — I'll need to find time to prepare an FFmpeg 4.1 compat patch first.

, https://git.io/fh5ck in python/cpython
Add versionadded directives to ssl.minimum_version and ssl.maximum_version
==========================================================================

`ssl.minimum_version` and `ssl.maximum_version` were introduced in Python 3.7, alongside `ssl.TLSVersion` and such. Not having `versionadded` directives is somewhat confusing.

This is trivial enough and warrants skip issue and skip news.

, https://git.io/fh5co in jarun/googler
Update TLS hardening code for py37 w/ OpenSSL 1.1
=================================================

- Use `SSLContext.minimum_version` for py37 w/ OpenSSL 1.1.0g+. (`OP_NO_*` options have been deprecated going forward.) [1]

- Rename `TLS1_2Connection` to `HardenedHTTPSConnection`. `TLS1_2Connection` is a bad name since the class doesn't always negotiate TLS 1.2, and TLS 1.2 isn't the final version of TLS.

  (Apparently I have TLS 1.3 in mind, which improves latency by saving a roundtrip.)

[1] https://docs.python.org/3/library/ssl.html#ssl.OP_NO_TLSv1