Update ibisclient to version 1.2.10

Closes #10 (closed)

ucamlookup/ibisclient/connection.py

@@ -50,6 +50,18 @@ except ImportError:
     print("WARNING: No SSL support - connection may be insecure")
     _have_ssl = False
 
+# Use the latest TLS protocol supported by both the client and the server.
+# Prior to Python versions 2.7.13 and 3.6, the way to do that was by
+# specifying PROTOCOL_SSLv23. In more recent versions, that is deprecated,
+# and presumably might go away one day. Instead, the new value PROTOCOL_TLS
+# has been added, and is now the recommended way to do it. This is actually
+# the same constant (2). Note that, despite the name, this will never choose
+# insecure SSL v2 or v3 protocols, because those are disabled on the server.
+if hasattr(ssl, 'PROTOCOL_TLS'):
+    _ssl_protocol = ssl.PROTOCOL_TLS
+else:
+    _ssl_protocol = ssl.PROTOCOL_SSLv23
+
 _MONTHS = ["Jan", "Feb", "Mar", "Apr", "May", "Jun",
            "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"]
 
@@ -107,7 +119,7 @@ class HTTPSValidatingConnection(HTTPSConnection):
             self.sock = ssl.wrap_socket(self.sock,
                                         ca_certs = self.ca_certs,
                                         cert_reqs = ssl.CERT_REQUIRED,
-                                        ssl_version = ssl.PROTOCOL_TLSv1)
+                                        ssl_version = _ssl_protocol)
 
             cert = self.sock.getpeercert()
             cert_hosts = []
@@ -137,7 +149,7 @@ class HTTPSValidatingConnection(HTTPSConnection):
             self.sock = ssl.wrap_socket(self.sock,
                                         ca_certs = None,
                                         cert_reqs = ssl.CERT_NONE,
-                                        ssl_version = ssl.PROTOCOL_TLSv1)
+                                        ssl_version = _ssl_protocol)
 
 class IbisClientConnection:
     """