generic-library/curl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

OpenSSL: Fix forcing SSLv3 connections

Browse Source 
Since ad34a2d5c8 (present in 7.34.0 release) forcing
SSLv3 will always return the error "curl: (35) Unsupported SSL protocol
version" Can be replicated with `curl -I -3 https://www.google.com/`.
This fix simply allows for v3 to be forced.
This commit is contained in:
Barry Abrahamson
2014-01-01 05:28:35 +01:00
committed by Daniel Stenberg
parent 1f47a77b29
commit db11750cfa
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
lib/vtls/openssl.c
View File

@@ -1551,6 +1551,7 @@ ossl_connect_step1(struct connectdata *conn,
switch(data->set.ssl.version) { switch(data->set.ssl.version) {
case CURL_SSLVERSION_DEFAULT: case CURL_SSLVERSION_DEFAULT:
case CURL_SSLVERSION_SSLv3:
ctx_options |= SSL_OP_NO_SSLv2; ctx_options |= SSL_OP_NO_SSLv2;
#ifdef USE_TLS_SRP #ifdef USE_TLS_SRP
if(data->set.ssl.authtype == CURL_TLSAUTH_SRP) { if(data->set.ssl.authtype == CURL_TLSAUTH_SRP) {