urllib3 2.x complains about DEFAULT_CIPHERS about whoisit

[weslambert]

This is bundled into the just released v2.7.0 version.

Thank you!

[meeb]

Thanks for the issue. It doesn't look like DEFAULT_CIPHERS is used at all now so setting it to a default list of ciphers probably won't fix this. Likely this needs a requests HTTPAdapter (which didn't fully support SSL/TLS tweaking when I originally wrote the cipher overwrite hacks). For reference and mostly for future notes:

https://requests.readthedocs.io/en/latest/user/advanced/#example-specific-ssl-version

The ConnctionPool passes down the **kwargs to HTTPSConnection which supports a custom ssl_context where custom ciphers could be specified:

https://urllib3.readthedocs.io/en/stable/reference/urllib3.connection.html#urllib3.connection.HTTPSConnection

[weslambert]

Understood. Thanks for looking into it!

[meeb]

The above commit should resolve this and be backwards as well as forward compatible. I've added a regression test as well. It'll be bundled into the next release.

[meeb]

This is bundled into the just released v2.7.0 version.