Bug#770447: use of ssl.PROTOCOL_SSLv3 which we don't support anymore

[Thomas Goirand]

On 11/21/2014 07:07 PM, Cyril Brulebois wrote:
> Control: severity -1 important
> 
> Thomas Goirand <zigo at debian.org> (2014-11-21):
>> Package: blender
>> Version: 2.72.b+dfsg0-1
>> Severity: serious
>>
>> Hi,
>>
>> A rapid code search shows that blender uses:
>>
>> ssl_version=ssl.PROTOCOL_SSLv3
>>
>> in release/scripts/addons/netrender/master.py:1161
>>
>> However, this support has been removed in Debian. Therefore, it is possible
>> that blender is broken.
>>
>> I haven't checked myself if this breaks the build of Blender, or if it
>> affects it a lot, as I have no time to do that. Though I would strongly
>> suggest the maintainer to check, and eventually downgrade this bug to
>> important only.
> 
> Definitely not breaking the build.
> 
> And given it's an addon, seemingly for network rendering, I don't think
> this qualifies as a serious bug. That doesn't mean fixing it for jessie
> would be rejected outright.
> 
> (A quick web search seems to point out it's diabled by default, see
> Instructions on: http://wiki.blender.org/index.php/Doc:2.6/Manual/Render/Performance/Netrender)
> 
> Mraw,
> KiBi.

Thanks for taking the time to investigat it (which I didn't have time
yet, but still wanted to push the bug before I had to go out of $workplace).

Cheers,

Thomas