new/fb_wrap_python/sitecustomize.py

import os
import ssl


TARGETS = {
    "www.facebook.com",
    "facebook.com",
    "m.facebook.com",
    "graph.facebook.com",
}

_orig_wrap_socket = ssl.SSLContext.wrap_socket


def _patched_wrap_socket(self, *args, **kwargs):
    server_hostname = kwargs.get("server_hostname")
    if server_hostname in TARGETS:
        # Work around network SNI filtering for selected Facebook hosts.
        kwargs["server_hostname"] = None
        try:
            self.check_hostname = False
        except Exception:
            pass
        try:
            self.verify_mode = ssl.CERT_NONE
        except Exception:
            pass
        if os.environ.get("FB_WRAP_DEBUG") == "1":
            print(f"[fb-wrap-python] disabled SNI for {server_hostname}", flush=True)
    return _orig_wrap_socket(self, *args, **kwargs)


ssl.SSLContext.wrap_socket = _patched_wrap_socket