<div dir="ltr"><span style="font-size:12.8px">> What platform are you on? </span><div><span style="font-size:12.8px">> How do you know what version of OpenSSL you're using? </span></div><div><span style="font-size:12.8px">> (It can sometimes be quite tricky to suss out what OpenSSL twisted is using unless you know the internals fairly well, unfortunately; 'twist --version' really ought to print it out.)</span></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px">I'm on (X)Ubuntu 16.10. And the system uses 1.0.2g-1ubuntu9.1.</span></div><div><span style="font-size:12.8px">But I built my own static wheel version of cryptography following <a href="https://cryptography.io/en/latest/installation/#static-wheels">https://cryptography.io/en/latest/installation/#static-wheels</a> , with OPENSSL_VERSION="1.1.0e"</span></div><div><span style="font-size:12.8px">and pip installed the wheel in another virtualenv to test it, along with twisted[tls]</span></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px">I checked OpenSSL version using this (that's what scrapy also does when printing versions):</span></div><div><div><span style="font-size:12.8px">$ python -c "import OpenSSL; print(OpenSSL.SSL.SSLeay_version(OpenSSL.SSL.SSLEAY_VERSION))"</span></div><div><span style="font-size:12.8px">OpenSSL 1.1.0e  16 Feb 2017</span></div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px"><span style="font-size:12.8px">> What about with 1.0.2?</span><br></div><div style="font-size:12.8px"><span style="font-size:12.8px"><br></span></div><div style="font-size:12.8px"><span style="font-size:12.8px">I just tested it again this morning with my system's default openssl:</span></div><div style="font-size:12.8px"><span style="font-size:12.8px"><br></span></div><div style="font-size:12.8px"><div style="font-size:12.8px">    $ python -c "import OpenSSL; print(OpenSSL.SSL.SSLeay_version(OpenSSL.SSL.SSLEAY_VERSION))"</div><div style="font-size:12.8px">    OpenSSL 1.0.2g  1 Mar 2016</div><div><br></div><div>with the same snippet using Twisted Web Agent,</div><div>this is what wireshark shows in the ClientHello:</div><div><br></div></div><div style="font-size:12.8px"><div style="font-size:12.8px">Extension: elliptic_curves</div><div style="font-size:12.8px">    Type: elliptic_curves (0x000a)</div><div style="font-size:12.8px">    Length: 28</div><div style="font-size:12.8px">    Elliptic Curves Length: 26</div><div style="font-size:12.8px">    Elliptic curves (13 curves)</div><div style="font-size:12.8px">        Elliptic curve: secp256r1 (0x0017)</div><div style="font-size:12.8px">        Elliptic curve: secp521r1 (0x0019)</div><div style="font-size:12.8px">        Elliptic curve: brainpoolP512r1 (0x001c)</div><div style="font-size:12.8px">        Elliptic curve: brainpoolP384r1 (0x001b)</div><div style="font-size:12.8px">        Elliptic curve: secp384r1 (0x0018)</div><div style="font-size:12.8px">        Elliptic curve: brainpoolP256r1 (0x001a)</div><div style="font-size:12.8px">        Elliptic curve: secp256k1 (0x0016)</div><div style="font-size:12.8px">        Elliptic curve: sect571r1 (0x000e)</div><div style="font-size:12.8px">        Elliptic curve: sect571k1 (0x000d)</div><div style="font-size:12.8px">        Elliptic curve: sect409k1 (0x000b)</div><div style="font-size:12.8px">        Elliptic curve: sect409r1 (0x000c)</div><div style="font-size:12.8px">        Elliptic curve: sect283k1 (0x0009)</div><div style="font-size:12.8px">        Elliptic curve: sect283r1 (0x000a)</div></div><div class="gmail_extra"><br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><br>
<br></blockquote></div><br></div></div></div>