Update server.py ssl wrapping

The previous method for wrapping ssl was removed so update to the replacement version. Signed-off-by: William Douglas <[email protected]>
clearlinux · Aug 28, 2024 · 659f2c0 · 659f2c0
1 parent 695417d
commit 659f2c0
Showing 1 changed file with 4 additions and 10 deletions.
diff --git a/test/functional/server.py b/test/functional/server.py
@@ -266,16 +266,10 @@ def parse_arguments():
 
     # configure ssl certificates
     if args.server_cert and args.server_key:
-        wrap_socket_args = {"certfile": args.server_cert,
-                            "keyfile": args.server_key,
-                            "server_side": True}
-
-        # add client certificate
-        if args.client_cert:
-            wrap_socket_args.update({"ca_certs": args.client_cert,
-                                     "cert_reqs": ssl.CERT_REQUIRED})
-
-        httpd.socket = ssl.wrap_socket(httpd.socket, **wrap_socket_args)
+        wrap_socket_args = {"server_side": True}
+        context = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER)
+        context.load_cert_chain(args.server_cert, args.server_key)
+        httpd.socket = context.wrap_socket(httpd.socket, **wrap_socket_args)
 
     # invalid certificate combination
     elif args.server_cert or args.server_key or args.client_cert: