diff --git a/IPython/html/notebookapp.py b/IPython/html/notebookapp.py index 8a3a221..ce99521 100644 --- a/IPython/html/notebookapp.py +++ b/IPython/html/notebookapp.py @@ -19,6 +19,7 @@ import re import select import signal import socket +import ssl import sys import threading import webbrowser @@ -846,6 +847,9 @@ class NotebookApp(BaseIPythonApplication): if not ssl_options: # None indicates no SSL config ssl_options = None + else: + # Disable SSLv3, since its use is discouraged. + ssl_options['ssl_version']=ssl.PROTOCOL_TLSv1 self.login_handler_class.validate_security(self, ssl_options=ssl_options) self.http_server = httpserver.HTTPServer(self.web_app, ssl_options=ssl_options, xheaders=self.trust_xheaders)