Mirrored_Repos/python-kasa
1
0
Fork 0
mirror of https://github.com/python-kasa/python-kasa.git synced 2026-09-19 20:43:52 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Add ECDHE-RSA-AES256 cipher for newer Tapo firmware (#1755)

Browse Source 
Add ECDHE-RSA-AES256-GCM-SHA384 alongside the existing ECDHE-RSA-AES128-GCM-SHA256 suite for newer Tapo firmware, while keeping all legacy suites for backward compatibility.
Tested with Tapo TC70, C530WS, and C210 cameras after firmware updates produced TLS handshake failures.
This commit is contained in:
darylldelfin
2026-09-18 21:34:59 +08:00
committed by GitHub
parent a29d0610ba
commit 0e3640c303
2 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
kasa/transports/sslaestransport.py
View File

@@ -74,6 +74,7 @@ class SslAesTransport(BaseTransport):
CIPHERS = ":".join( CIPHERS = ":".join(
[ [
"ECDHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256",
"ECDHE-RSA-AES256-GCM-SHA384",
"AES256-GCM-SHA384", "AES256-GCM-SHA384",
"AES256-SHA256", "AES256-SHA256",
"AES128-GCM-SHA256", "AES128-GCM-SHA256",

6
tests/transports/test_sslaestransport.py
View File

@@ -48,6 +48,12 @@ MOCK_STOCK = "abcdefghijklmnopqrstuvwxyz1234)("
MOCK_UNENCRYPTED_PASSTHROUGH_STOK = "32charLowerCaseHexStok" MOCK_UNENCRYPTED_PASSTHROUGH_STOK = "32charLowerCaseHexStok"
def test_ssl_ciphers_include_modern_tapo_suites() -> None:
"""Keep compatibility with cameras that dropped legacy RSA ciphers."""
assert "ECDHE-RSA-AES128-GCM-SHA256" in SslAesTransport.CIPHERS
assert "ECDHE-RSA-AES256-GCM-SHA384" in SslAesTransport.CIPHERS
@pytest.mark.parametrize( @pytest.mark.parametrize(
( (
"status_code", "status_code",