[zorp-hu] 3.9 Pssl.py:525: DeprecationWarning

Kosa Attila zsiga at kosaek.hu
2011. Ápr. 13., Sze, 11:49:59 CEST


Hello!
Probalkozom egy egyszeru https proxy-val, de az indulasakor
mindig ezt az uzenetet kapom:

# zorpctl start zorp_https
Starting Zorp Firewall Suite: /usr/share/zorp/pylib/Zorp/Pssl.py:525: DeprecationWarning: the sets module is deprecated
  from sets import ImmutableSet
zorp_https 

Mondjuk ettol meg elindul, es mukodik is, szoval pillanatnyilag
nem okoz problemat ez a warning, de ki tudja, hogy mikor fog...
Es nem is szep :)

A konfig igy nez ki:

from Zorp.Core import *
from Zorp.Pssl import *
from Zorp.Http import *


InetZone("intranet", "192.168.2.0/24",
        inbound_services=[],
        outbound_services=["intra_https"])

InetZone("internet", "0.0.0.0/0",
        inbound_services=["intra_https"],
        outbound_services=[])

class IntraHttps(HttpProxy):
        def config(self):
                HttpProxy.config(self)
                self.ssl.client_cert = '/etc/ssl/certs/fw.akarmi.hu.crt'
                self.ssl.client_key = '/etc/ssl/private/fw.akarmi.hu.key.nopass'
                self.ssl.client_verify_type = SSL_VERIFY_NONE
                self.ssl.server_ca_directory = '/etc/zorp/ca.crt'
                self.ssl.server_crl_directory = '/etc/zorp/crls'
                self.ssl.server_ssl_method = PSSL_METHOD_SSLV3
                self.ssl.server_disable_proto_sslv2 = TRUE
                self.ssl.server_ssl_cipher = SSL_CIPHERS_HIGH
                self.ssl.server_need_ssl = TRUE
                self.ssl.server_verify_type = SSL_VERIFY_REQUIRED_TRUSTED
                self.ssl.client_need_ssl = TRUE
                self.ssl.server_verify_depth = 3

def zorp_https() :
        Service("intra_https", IntraHttps, TransparentRouter())

        Listener(SockAddrInet("192.168.2.254", 60443), "intra_https", transparent=TRUE)

# zorpctl version
Zorp 3.9.0
Revision: ssh+git://coroner@git.balabit//var/scm/git/zorp/zorp-core--mainline--4.0#master#fcb59dd06e0805ce995b8d94cc8c12096e385365
Compile-Date: Apr 13 2011 09:11:19
Config-Date: 2011/04/13
Trace: off
Debug: off
IPOptions: off
IPFilter-Tproxy: off
Netfilter-Tproxy: on
Linux22-Tproxy: off

libzorpll 3.9.0.1
Revision: 
Compile-Date: Apr 12 2011 14:36:53
Trace: off
MemTrace: off
Caps: on
Debug: off
StackDump: off

-- 
		Udvozlettel
				    Zsiga


További információk a(z) zorp-hu levelezőlistáról