Summary

Every HTTPS target crashes at startup on Python 3.15 with AttributeError: module 'ssl' has no attribute 'PROTOCOL_TLSv1'. The fix already exists in master (11afdcb) — this issue is mainly to ask for a point release so downstream packagers pick it up.

Environment

• sqlmap 1.10.10 (released tarball / Homebrew bottle — latest tag, predates the fix)
• Python 3.15.2
• macOS (Homebrew now defaults to [email protected] for the sqlmap formula, so every Homebrew user hits this on any HTTPS URL)

Traceback (trimmed)

File ".../lib/request/httpshandler.py", line 67, in connect
    for protocol in (_ for _ in _protocols if _ >= ssl.PROTOCOL_TLSv1):
                                                   ^^^^^^^^^^^^^^
AttributeError: module 'ssl' has no attribute 'PROTOCOL_TLSv1'. Did you mean: '.PROTOCOL_TLS'?

Triggered via checkConnection -> Request.queryPage -> Connect.getPage -> https_open -> connect().

Root cause

Python 3.15 removed the legacy ssl.PROTOCOL_TLSv1 constant; the 1.10.10 lib/request/httpshandler.py used it as the numeric "minimum TLS version" filter when iterating _protocols.

Master replaced the numeric comparison with a membership test against the getattr-guarded _tlsProtocols list (commit 11afdcb) — verified working: I patched 1.10.10 the same way locally and a full scan against a local TLS server completes normally.

Ask

Please tag 1.10.11 (or similar) so Homebrew/Linux packagers can ship the fix. Until then, affected users can run master from git or apply the one-line fallback:

for protocol in (_ for _ in _protocols if _ >= getattr(ssl, "PROTOCOL_TLSv1", ssl.PROTOCOL_TLS_CLIENT)):

Thanks!