candlepin/python-rhsm — pull request #133 by alikins (2014-10-15 22:01:02+00:00)
Title: 1153375: Stop using TLSv1.0 protocol by default.

To support servers that only support TLS v1.1 or
newer, the default TLS protocol needs to change.

Change default protocol name to "sslv23". "sslv23"
is an openssl ssl method for starting with TLS v1.2
and failing back to v1.1, v1, and SSL v3.

These changes are related related to the "poodle"
attack on SSLv3, and the push to move servers to
support only TLSv1.1 or newer.

Note: With older versions of openssl, and servers that
provide SSLv3, this can allow the connection to negotiate
to SSLv3. Newer versions of openssl with support for the
TLS_FALLBACK_SCSV will prevent this.

Server implementing the rhsm api (aka, candlepin) should
be updated to disable SSLv3.