diff options
author | Barry Abrahamson <barry@automattic.com> | 2014-01-01 05:28:35 +0100 |
---|---|---|
committer | Daniel Stenberg <daniel@haxx.se> | 2014-01-01 21:36:47 +0100 |
commit | db11750cfa5b17a7e6ae7f64df5807e436d1a130 (patch) | |
tree | f3387544ea5f50c1a91a4702e398e2aa679b0c89 | |
parent | 1f47a77b2980ba92c559b967a7bdecf498f2c346 (diff) |
OpenSSL: Fix forcing SSLv3 connections
Since ad34a2d5c87c7f4b14e8dded3 (present in 7.34.0 release) forcing
SSLv3 will always return the error "curl: (35) Unsupported SSL protocol
version" Can be replicated with `curl -I -3 https://www.google.com/`.
This fix simply allows for v3 to be forced.
-rw-r--r-- | lib/vtls/openssl.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/vtls/openssl.c b/lib/vtls/openssl.c index 7a21c737a..bc22bb888 100644 --- a/lib/vtls/openssl.c +++ b/lib/vtls/openssl.c @@ -1551,6 +1551,7 @@ ossl_connect_step1(struct connectdata *conn, switch(data->set.ssl.version) { case CURL_SSLVERSION_DEFAULT: + case CURL_SSLVERSION_SSLv3: ctx_options |= SSL_OP_NO_SSLv2; #ifdef USE_TLS_SRP if(data->set.ssl.authtype == CURL_TLSAUTH_SRP) { |