{"action":"created","issue":{"url":"https://api.github.com/repos/shazow/urllib3/issues/778","labels_url":"https://api.github.com/repos/shazow/urllib3/issues/778/labels{/name}","comments_url":"https://api.github.com/repos/shazow/urllib3/issues/778/comments","events_url":"https://api.github.com/repos/shazow/urllib3/issues/778/events","html_url":"https://github.com/shazow/urllib3/issues/778","id":125628925,"number":778,"title":"Some HTTPS website cannot load without changing ssl_version","user":{"login":"cattleyavns","id":10792823,"avatar_url":"https://avatars.githubusercontent.com/u/10792823?v=3","gravatar_id":"","url":"https://api.github.com/users/cattleyavns","html_url":"https://github.com/cattleyavns","followers_url":"https://api.github.com/users/cattleyavns/followers","following_url":"https://api.github.com/users/cattleyavns/following{/other_user}","gists_url":"https://api.github.com/users/cattleyavns/gists{/gist_id}","starred_url":"https://api.github.com/users/cattleyavns/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cattleyavns/subscriptions","organizations_url":"https://api.github.com/users/cattleyavns/orgs","repos_url":"https://api.github.com/users/cattleyavns/repos","events_url":"https://api.github.com/users/cattleyavns/events{/privacy}","received_events_url":"https://api.github.com/users/cattleyavns/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":18,"created_at":"2016-01-08T15:09:28Z","updated_at":"2016-01-08T19:11:42Z","closed_at":null,"body":"Some websites:\r\n\r\n1. Default http://prntscr.com/9njwan FAIL | Override ssl_version to 'SSLv3' http://prntscr.com/9njwxr SUCCESS\r\n2. Default http://prntscr.com/9njxdb FAIL | Override ssl_version to 'TLSv1' http://prntscr.com/9njxv5 SUCCESS\r\n3. Default http://prntscr.com/9njzow FAIL | Override ssl_version to 'SSLv3' http://prntscr.com/9nk02x SUCCESS\r\n\r\nSo i doubt this is a bug because I think urllib3 should automatically detect exact ssl version to use or i should detect website's ssl version myself ? And how to do that ? Thank!\r\n\r\nMy web browsers like Firefox, IE, Chrome can load those websites without any problem, so I think this is a bug. \r\n\r\n\r\n<bountysource-plugin>\r\n---\r\nWant to back this issue? **[Post a bounty on it!](https://www.bountysource.com/issues/29704152-some-https-website-cannot-load-without-changing-ssl_version?utm_campaign=plugin&utm_content=tracker%2F192525&utm_medium=issues&utm_source=github)** We accept bounties via [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F192525&utm_medium=issues&utm_source=github).\r\n</bountysource-plugin>"},"comment":{"url":"https://api.github.com/repos/shazow/urllib3/issues/comments/170096257","html_url":"https://github.com/shazow/urllib3/issues/778#issuecomment-170096257","issue_url":"https://api.github.com/repos/shazow/urllib3/issues/778","id":170096257,"user":{"login":"cattleyavns","id":10792823,"avatar_url":"https://avatars.githubusercontent.com/u/10792823?v=3","gravatar_id":"","url":"https://api.github.com/users/cattleyavns","html_url":"https://github.com/cattleyavns","followers_url":"https://api.github.com/users/cattleyavns/followers","following_url":"https://api.github.com/users/cattleyavns/following{/other_user}","gists_url":"https://api.github.com/users/cattleyavns/gists{/gist_id}","starred_url":"https://api.github.com/users/cattleyavns/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cattleyavns/subscriptions","organizations_url":"https://api.github.com/users/cattleyavns/orgs","repos_url":"https://api.github.com/users/cattleyavns/repos","events_url":"https://api.github.com/users/cattleyavns/events{/privacy}","received_events_url":"https://api.github.com/users/cattleyavns/received_events","type":"User","site_admin":false},"created_at":"2016-01-08T19:11:42Z","updated_at":"2016-01-08T19:11:42Z","body":"But it is weird that ssl module can get SSL information from those website without any problem.\r\n\r\n```\r\nimport socket\r\nimport ssl\r\ns = socket.socket(socket.AF_INET, socket.SOCK_STREAM)\r\nssl_sock = ssl.wrap_socket(s)\r\nssl_sock.connect(('vozforums.com', 443))\r\nprint (repr(ssl_sock.getpeername()))\r\nprint (ssl_sock.cipher())\r\n```\r\n\r\nThis code works very well, but problem is if I can get SSL information using .wrap_socket then .connect, then how to do the last but most important step is get the best ssl_version to use with PoolManager(ssl_version=ssl_version_from_the_step_above)"}}