curl-library
Re: SSLv3 fallback attack POODLE
From: moparisthebest <admin_at_moparisthebest.com>
Date: Tue, 04 Nov 2014 09:26:11 -0500
Date: Tue, 04 Nov 2014 09:26:11 -0500
On 11/04/2014 05:42 AM, Daniel Stenberg wrote:
> we should do something about test 2035 which now fails
> when run on any TLS backend without certificate pinning support, like
> PolarSSL...
>
The tests have a 'dependency' type of setup as far as requiring SSL and
such, would it be possible to extend that to depend on certain SSL
backends instead of SSL in general? Otherwise this problem will just
get worse as more types of pinning code is added and only supported in a
few backends.
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2014-11-04