From 447c31ce9d62913302040304e3f3d9d43743c71f Mon Sep 17 00:00:00 2001 From: Dan Fandrich Date: Fri, 11 Jul 2014 23:55:53 +0200 Subject: gnutls: explicitly added SRP to the priority string This seems to have become necessary for SRP support to work starting with GnuTLS ver. 2.99.0. Since support for SRP was added to GnuTLS before the function that takes this priority string, there should be no issue with backward compatibility. --- lib/vtls/gtls.c | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) (limited to 'lib') diff --git a/lib/vtls/gtls.c b/lib/vtls/gtls.c index 7f920b27a..54bfef118 100644 --- a/lib/vtls/gtls.c +++ b/lib/vtls/gtls.c @@ -544,19 +544,19 @@ gtls_connect_step1(struct connectdata *conn, break; case CURL_SSLVERSION_DEFAULT: case CURL_SSLVERSION_TLSv1: - prioritylist = GNUTLS_CIPHERS ":-VERS-SSL3.0"; + prioritylist = GNUTLS_CIPHERS ":-VERS-SSL3.0:+SRP"; break; case CURL_SSLVERSION_TLSv1_0: prioritylist = GNUTLS_CIPHERS ":-VERS-SSL3.0:-VERS-TLS-ALL:" - "+VERS-TLS1.0"; + "+VERS-TLS1.0:+SRP"; break; case CURL_SSLVERSION_TLSv1_1: prioritylist = GNUTLS_CIPHERS ":-VERS-SSL3.0:-VERS-TLS-ALL:" - "+VERS-TLS1.1"; + "+VERS-TLS1.1:+SRP"; break; case CURL_SSLVERSION_TLSv1_2: prioritylist = GNUTLS_CIPHERS ":-VERS-SSL3.0:-VERS-TLS-ALL:" - "+VERS-TLS1.2"; + "+VERS-TLS1.2:+SRP"; break; case CURL_SSLVERSION_SSLv2: default: -- cgit v1.2.3