[Twisted-web] Converting endpoints.serverFromString to TLS_v3

[Axel Rau]

Hi,

how can I convert the plugin code below to recent security level, to TLSv3, dhparams and extraCertChain ?
Is OCSP stapling available in Twisted meanwhile?

Thanks, Axel

    def makeService(self, options):
        """
        makeService() returns an IService.
        twisted.internet.application.MultiService[1] is an IService that
        composes other services (it's an IServiceCollection).
        """
        ipv4_server = endpoints.serverFromString(
            reactor, 'ssl:{}:privateKey={}:certKey={}:interface={}'.format(
                options['port'],
                endpoints.quoteStringArgument(options['cert_path']),
                endpoints.quoteStringArgument(options['key_path']),
                options['ipv4_address']))

        ipv6_server = endpoints.serverFromString(
            reactor, 'ssl:{}:privateKey={}:certKey={}:interface={}'.format(
                options['port'],
                endpoints.quoteStringArgument(options['cert_path']),
                endpoints.quoteStringArgument(options['key_path']),
                endpoints.quoteStringArgument(options['ipv6_address'])))

        ipv4 = internet.StreamServerEndpointService(ipv4_server, meteo_factory)
        ipv6 = internet.StreamServerEndpointService(ipv6_server, meteo_factory)
        root = MultiService()
        ipv4.setServiceParent(root)
        ipv6.setServiceParent(root)
        return root

serviceMaker = MeteoServiceMaker()

---
PGP-Key: CDE74120  ☀  computing @ chaos claudius

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 901 bytes
Desc: Message signed with OpenPGP
URL: </pipermail/twisted-web/attachments/20200326/fb4b8152/attachment.sig>