Ubuntu中文论坛

代码： 全选

# goagent下SSLv3的bug

## 错误信息
Traceback (most recent call last):
  File "proxy.py", line 66, in <module>
    __import__('gevent.monkey', fromlist=['.']).patch_all()
  File "/usr/local/lib/python2.7/dist-packages/gevent/monkey.py", line 185, in patch_all
    patch_socket(dns=dns, aggressive=aggressive)
  File "/usr/local/lib/python2.7/dist-packages/gevent/monkey.py", line 124, in patch_socket
    from gevent import socket
  File "/usr/local/lib/python2.7/dist-packages/gevent/socket.py", line 659, in <module>
    from gevent.ssl import sslwrap_simple as ssl, SSLError as sslerror, SSLSocket as SSLType
  File "/usr/local/lib/python2.7/dist-packages/gevent/ssl.py", line 386, in <module>
    def get_server_certificate(addr, ssl_version=PROTOCOL_SSLv3, ca_certs=None):
NameError: name 'PROTOCOL_SSLv3' is not defined

## 修改方案
修改/usr/local/lib/python2.7/dist-packages/gevent/ssl.py的line 386
-   def get_server_certificate(addr, ssl_version=PROTOCOL_SSLv3, ca_certs=None):
+   def get_server_certificate(addr, ssl_version=PROTOCOL_TLSv1, ca_certs=None):

## 原因
* SSLv3协议由于设计缺陷已经被python禁用，可以使用TLSv1协议代替

## 相关新闻
* Python3.5整个标准库中禁用 SSLv3 (See issue [22638](https://bugs.python.org/issue22638) for more details; this change was backported to CPython 3.4 and 2.7.)

代码： 全选

apt update; apt full-upgrade

代码： 全选

sudo apt install --install-recommends xserver-xorg-hwe-16.04