curl-library
[PATCH] Fix forcing SSLv3 connections
From: Barry Abrahamson <barry_at_automattic.com>
Date: Tue, 31 Dec 2013 22:28:35 -0600
Date: Tue, 31 Dec 2013 22:28:35 -0600
Since ad34a2d5c87c7f4b14e8dded3 (present
in 7.34.0 release) forcing SSLv3 will always return the
error "curl: (35) Unsupported SSL protocol version" Can be
replicated with `curl -I -3 https://www.google.com/`.
This patch simply allows for v3 to be forced.
--- lib/vtls/openssl.c | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/vtls/openssl.c b/lib/vtls/openssl.c index 7a21c73..bc22bb8 100644 --- a/lib/vtls/openssl.c +++ b/lib/vtls/openssl.c @@ -1551,6 +1551,7 @@ ossl_connect_step1(struct connectdata *conn, switch(data->set.ssl.version) { case CURL_SSLVERSION_DEFAULT: + case CURL_SSLVERSION_SSLv3: ctx_options |= SSL_OP_NO_SSLv2; #ifdef USE_TLS_SRP if(data->set.ssl.authtype == CURL_TLSAUTH_SRP) { — 1.7.10.4 -- Barry Abrahamson | Systems Wrangler | Automattic Blog: http://barry.wordpress.com ------------------------------------------------------------------- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.htmlReceived on 2014-01-01