From f9a60620818b6a19ebe3e6f15e1b57d7012e6fb0 Mon Sep 17 00:00:00 2001 From: Gunter Knauf Date: Tue, 19 Feb 2008 23:10:07 +0000 Subject: applied patch to disable SSLv2 by default; discussion: http://sourceforge.net/tracker/index.php?func=detail&aid=1767276&group_id=976&atid=350976 Submitted by Kaspar Brand. --- lib/qssl.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'lib/qssl.c') diff --git a/lib/qssl.c b/lib/qssl.c index d89f01730..0252b465e 100644 --- a/lib/qssl.c +++ b/lib/qssl.c @@ -90,7 +90,7 @@ static CURLcode Curl_qsossl_init_session(struct SessionHandle * data) memset((char *) &initappstr, 0, sizeof initappstr); initappstr.applicationID = certname; initappstr.applicationIDLen = strlen(certname); - initappstr.protocol = SSL_VERSION_CURRENT; + initappstr.protocol = TLSV1_SSLV3; initappstr.sessionType = SSL_REGISTERED_AS_CLIENT; rc = SSL_Init_Application(&initappstr); @@ -190,7 +190,7 @@ static CURLcode Curl_qsossl_handshake(struct connectdata * conn, int sockindex) default: case CURL_SSLVERSION_DEFAULT: - h->protocol = SSL_VERSION_CURRENT; + h->protocol = TLSV1_SSLV3; break; case CURL_SSLVERSION_TLSv1: -- cgit v1.2.3