From fdbb40933131b1e8310024d71767cb6cae64ce86 Mon Sep 17 00:00:00 2001 From: Philip Lundrigan Date: Fri, 15 Jan 2016 13:39:54 -0700 Subject: [PATCH] Increase security of using SSL --- homeassistant/components/http.py | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/homeassistant/components/http.py b/homeassistant/components/http.py index 35c215a8630..073604e3b2c 100644 --- a/homeassistant/components/http.py +++ b/homeassistant/components/http.py @@ -112,10 +112,10 @@ class HomeAssistantHTTPServer(ThreadingMixIn, HTTPServer): _LOGGER.info("running http in development mode") if ssl_certificate is not None: - wrap_kwargs = {'certfile': ssl_certificate} - if ssl_key is not None: - wrap_kwargs['keyfile'] = ssl_key - self.socket = ssl.wrap_socket(self.socket, **wrap_kwargs) + context = ssl.create_default_context( + purpose=ssl.Purpose.CLIENT_AUTH) + context.load_cert_chain(ssl_certificate, keyfile=ssl_key) + self.socket = context.wrap_socket(self.socket, server_side=True) def start(self): """ Starts the HTTP server. """