Possible to configure OpenSSL ciphers?

[b-morgenthaler]

Hi all,

last year I stumbled upon an issue while using robotframework-requests that boiled down to not having a a common SSL cipher between my http server (REST API endpoint) and my client (robotframework test case using robotframework-requests on an Ubuntu with openssl default config).

The root cause seems to be somewhere around urllib3 v2.x (and python-requests using it) with a change in using default ciphers from CPython. Please follow the references below for more details.

The recommended work-around from [3] is to use a dedicated configuration with urllib3 or python-requests.

Is the recommended work-around also possible with robotframework-requests. i.e. is it possible to configure python-requests or urllib3 with robotframework-requests so that more (possibly weak) SSL cipher are accepted by the client?

References:

• [1] Behavior change: v2.x raises SSLEOFError with Python3.10 where v2.x does not with Python3.8
• [2] Fix the use of default OpenSSL ciphers
• [3] Fixing SSLV3_ALERT_HANDSHAKE_FAILURE with urllib3 2.0