cURL / Mailing Lists / curl-library / Single Mail


Re: SSLv3 fallback attack POODLE

From: Ray Satiro <>
Date: Tue, 04 Nov 2014 12:55:20 -0500

On 11/4/2014 9:26 AM, moparisthebest wrote:
> On 11/04/2014 05:42 AM, Daniel Stenberg wrote:
>> we should do something about test 2035 which now fails
>> when run on any TLS backend without certificate pinning support, like
>> PolarSSL...
> The tests have a 'dependency' type of setup as far as requiring SSL and
> such, would it be possible to extend that to depend on certain SSL
> backends instead of SSL in general? Otherwise this problem will just
> get worse as more types of pinning code is added and only supported in a
> few backends.

Isn't that only for openssl and if so why not just change the features
from SSL to OpenSSL, wouldn't that solve the problem easily

List admin:
Received on 2014-11-04