Hello again,

yet another version of the same patch for libcurl-NSS and broken TLS servers.
The only incremental change is to not enable SSL_V2_COMPATIBLE_HELLO on the
second attempt per Nelson's suggestion:

--- a/lib/nss.c
+++ b/lib/nss.c
@@ -1135,8 +1135,7 @@ CURLcode Curl_nss_connect(struct connectdata *conn, int
sockindex)
   if(SSL_OptionSet(model, SSL_ENABLE_TLS, tlsv1) != SECSuccess)
     goto error;

- if(SSL_OptionSet(model, SSL_V2_COMPATIBLE_HELLO, ssl2
- || data->state.ssl_connect_retry) != SECSuccess)
+ if(SSL_OptionSet(model, SSL_V2_COMPATIBLE_HELLO, ssl2) != SECSuccess)
     goto error;

   /* reset the flag to avoid an infinite loop */

FYI Kaspar has raised an issue at upstream bugzilla, where you can find some
additional info:

https://bugzilla.mozilla.org/show_bug.cgi?id=526806

Kamil

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html