diff options
| author | Dan Fandrich <dan@coneharvesters.com> | 2014-07-11 23:55:53 +0200 |
|---|---|---|
| committer | Dan Fandrich <dan@coneharvesters.com> | 2014-07-12 00:11:44 +0200 |
| commit | 447c31ce9d62913302040304e3f3d9d43743c71f (patch) | |
| tree | ca5ab873fda5ced541a8b1720d2763f72e98a6a0 /lib/vtls | |
| parent | d582c272a6782a28d9f14547b19564a2292e2a80 (diff) | |
gnutls: explicitly added SRP to the priority string
This seems to have become necessary for SRP support to work starting
with GnuTLS ver. 2.99.0. Since support for SRP was added to GnuTLS
before the function that takes this priority string, there should be no
issue with backward compatibility.
Diffstat (limited to 'lib/vtls')
| -rw-r--r-- | lib/vtls/gtls.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/lib/vtls/gtls.c b/lib/vtls/gtls.c index 7f920b27a..54bfef118 100644 --- a/lib/vtls/gtls.c +++ b/lib/vtls/gtls.c @@ -544,19 +544,19 @@ gtls_connect_step1(struct connectdata *conn, break; case CURL_SSLVERSION_DEFAULT: case CURL_SSLVERSION_TLSv1: - prioritylist = GNUTLS_CIPHERS ":-VERS-SSL3.0"; + prioritylist = GNUTLS_CIPHERS ":-VERS-SSL3.0:+SRP"; break; case CURL_SSLVERSION_TLSv1_0: prioritylist = GNUTLS_CIPHERS ":-VERS-SSL3.0:-VERS-TLS-ALL:" - "+VERS-TLS1.0"; + "+VERS-TLS1.0:+SRP"; break; case CURL_SSLVERSION_TLSv1_1: prioritylist = GNUTLS_CIPHERS ":-VERS-SSL3.0:-VERS-TLS-ALL:" - "+VERS-TLS1.1"; + "+VERS-TLS1.1:+SRP"; break; case CURL_SSLVERSION_TLSv1_2: prioritylist = GNUTLS_CIPHERS ":-VERS-SSL3.0:-VERS-TLS-ALL:" - "+VERS-TLS1.2"; + "+VERS-TLS1.2:+SRP"; break; case CURL_SSLVERSION_SSLv2: default: |