Quote:
Originally Posted by gbm
From the release notes for CentOS-7
Code:
NSS no longer accepts DH key parameters < 768 nor RSA/DSA certificates with key sizes < 1024 bits, NSS also now enables TLS1.1/1.2 by default
|
None of those apply here. The key is 4096 bytes long. The server uses DH size of 2048 and the server most definitely supports TLS 1.1 and 1.2.
More likely that the ssl python module provided by the distro is broken. But yes, the easiest fix is to just download the tarball manually and install it, as is described on the download page.