cURL / Mailing Lists / curl-library / Single Mail

curl-library

RE: SSL cipher error when reusing a curl handle

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Sat, 4 May 2002 17:59:44 +0200 (MET DST)

On Fri, 3 May 2002, Gandt, Eric wrote:

[ I got a fine example from Eric privately, and using that I could repeat the
problems. ]

> If you need anything else please let me know.

I managed to get everything working simply by forcing libcurl into using
SSLv2 (CURLOPT_SSLVERSION).

I consider this a problem with the remote site, and not in libcurl. Normally,
the SSL layer should be able to negotiate which version to use. Some (older)
implementations have problems with this, and I believe this is an example.
The session-ID re-use seems to trigger this...

-- 
    Daniel Stenberg -- curl groks URLs -- http://curl.haxx.se/

Received on 2002-05-04

This message: [ Message body ]
Next message: Jean-Philippe Barrette-LaPierre: "an exploitable buffer overflow in cURL?"
Previous message: Daniel Stenberg: "fopen() emulation"
Maybe in reply to: Gandt, Eric: "SSL cipher error when reusing a curl handle"

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]