From 173160c0d068f1aba390fe6eb2e847af6ae48dca Mon Sep 17 00:00:00 2001 From: Nick Zitzmann Date: Wed, 2 Oct 2013 21:19:28 -0500 Subject: darwinssl: block TLS_RSA_WITH_NULL_SHA256 cipher Credit (for catching a cipher I forgot to add to the blocked ciphers list): https://www.ssllabs.com/ssltest/viewMyClient.html --- lib/curl_darwinssl.c | 1 + 1 file changed, 1 insertion(+) (limited to 'lib') diff --git a/lib/curl_darwinssl.c b/lib/curl_darwinssl.c index 211252f65..43fe05336 100644 --- a/lib/curl_darwinssl.c +++ b/lib/curl_darwinssl.c @@ -1330,6 +1330,7 @@ static CURLcode darwinssl_connect_step1(struct connectdata *conn, case SSL_NULL_WITH_NULL_NULL: case SSL_RSA_WITH_NULL_MD5: case SSL_RSA_WITH_NULL_SHA: + case 0x003B: /* TLS_RSA_WITH_NULL_SHA256 */ case SSL_FORTEZZA_DMS_WITH_NULL_SHA: case 0xC001: /* TLS_ECDH_ECDSA_WITH_NULL_SHA */ case 0xC006: /* TLS_ECDHE_ECDSA_WITH_NULL_SHA */ -- cgit v1.2.3