On Mon, Apr 23, 2012 at 2:01 PM, Kamil Dudka <kdudka_at_redhat.com> wrote:

> You can try to compile libcurl against NSS instead of OpenSSL.  NSS uses
> another approach to prevent this kind of attack and does not send empty
> packets.

Honest question...

Which is current situation regarding libnsspem library availability
outside of RH universe? It seems it is required in order to allow
usage and interoperability with PEM certificates.

-- 
-=[Yang]=-
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-users
FAQ:        http://curl.haxx.se/docs/faq.html
Etiquette:  http://curl.haxx.se/mail/etiquette.html