summaryrefslogtreecommitdiff
path: root/src/leap/common/certs.py
diff options
context:
space:
mode:
Diffstat (limited to 'src/leap/common/certs.py')
-rw-r--r--src/leap/common/certs.py35
1 files changed, 0 insertions, 35 deletions
diff --git a/src/leap/common/certs.py b/src/leap/common/certs.py
index 95704a6..db513f6 100644
--- a/src/leap/common/certs.py
+++ b/src/leap/common/certs.py
@@ -30,8 +30,6 @@ from leap.common.check import leap_assert
logger = logging.getLogger(__name__)
-SKIP_SSL_CHECK = os.environ.get('SKIP_TWISTED_SSL_CHECK', False)
-
def get_cert_from_string(string):
"""
@@ -180,36 +178,3 @@ def should_redownload(certfile, now=time.gmtime):
return True
return False
-
-
-def get_compatible_ssl_context_factory(cert_path=None):
- import twisted
- from twisted.internet import ssl
- cert = None
-
- if SKIP_SSL_CHECK:
- # This should be used *only* for testing purposes.
-
- class WebClientContextFactory(ssl.ClientContextFactory):
- """
- A web context factory which ignores the hostname and port and does
- no certificate verification.
- """
- def getContext(self, hostname, port):
- return ssl.ClientContextFactory.getContext(self)
-
- contextFactory = WebClientContextFactory()
- return contextFactory
-
- if twisted.version.base() > '14.0.1':
- from twisted.web.client import BrowserLikePolicyForHTTPS
- if cert_path:
- cert = ssl.Certificate.loadPEM(open(cert_path).read())
- policy = BrowserLikePolicyForHTTPS(cert)
- return policy
- else:
- raise Exception(("""
- Twisted 14.0.2 is needed in order to have secure
- Client Web SSL Contexts, not %s
- See: http://twistedmatrix.com/trac/ticket/7647
- """) % (twisted.version.base()))