Add ssl context helper

Author: bdraco

tests/test_util.py

@@ -22,6 +22,7 @@
     as_utc_from_local,
     get_configuration_url,
     get_latest_activity,
+    get_ssl_context,
     update_doorbell_image_from_activity,
     update_lock_detail_from_activity,
 )
@@ -398,3 +399,8 @@ def test_get_configuration_url():
     assert get_configuration_url(Brand.AUGUST) == "https://account.august.com"
     assert get_configuration_url(Brand.YALE_ACCESS) == "https://account.august.com"
     assert get_configuration_url(Brand.YALE_HOME) == "https://account.aaecosystem.com"
+
+
+def test_get_ssl_context():
+    """Test getting the ssl context is cached."""
+    assert get_ssl_context() is get_ssl_context()

yalexs/util.py

@@ -1,4 +1,7 @@
 import datetime
+from functools import cache
+import random
+import ssl
 from typing import Optional, Union
 
 from .activity import (
@@ -112,3 +115,15 @@ def as_utc_from_local(dtime: datetime.datetime) -> datetime.datetime:
 def get_configuration_url(brand: Brand) -> str:
     """Return the configuration URL for the brand."""
     return CONFIGURATION_URLS[brand]
+
+
+@cache
+def get_ssl_context() -> ssl.SSLContext:
+    """Return an SSL context for cloudflare."""
+    context = ssl.create_default_context()
+    ciphers = [cipher["name"] for cipher in context.get_ciphers()]
+    default_ciphers = ciphers[:3]
+    backup_ciphers = ciphers[3:]
+    random.shuffle(backup_ciphers)
+    context.set_ciphers(":".join((*default_ciphers, *backup_ciphers)))
+    return context