From a0fda2aaa2681d6fbcafb57068b300a542b16585 Mon Sep 17 00:00:00 2001
From: berhsi <berhsi@web.de>
Date: Thu, 19 Sep 2019 10:36:48 +0200
Subject: [PATCH] setstatus.py: set the same cipher suite as the server

---
 setstatus.py | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/setstatus.py b/setstatus.py
index 0f13580..e19ffa2 100755
--- a/setstatus.py
+++ b/setstatus.py
@@ -67,9 +67,8 @@ def main():
 
     context = ssl.create_default_context(ssl.Purpose.SERVER_AUTH,
                                          cafile=SERVER_CERT)
-    context.options &= ~ssl.PROTOCOL_TLS
-    context.verify_mode = ssl.CERT_OPTIONAL
-    # context.set_ciphers('HIGHT:!aNULL:!RC4:!DSS')
+    context.set_ciphers('EECDH+AESGCM')   # only ciphers for tls 1.2 and 1.3
+    context.options |= getattr(ssl._ssl, 'OP_NO_COMPRESSION', 0)
     context.load_cert_chain(certfile=CLIENT_CERT, keyfile=CLIENT_KEY)
     print('SSL context created')