curl-library
Re: SSLv3 fallback attack POODLE
Date: Tue, 04 Nov 2014 12:55:20 -0500
On 11/4/2014 9:26 AM, moparisthebest wrote:
> On 11/04/2014 05:42 AM, Daniel Stenberg wrote:
>> we should do something about test 2035 which now fails
>> when run on any TLS backend without certificate pinning support, like
>> PolarSSL...
> The tests have a 'dependency' type of setup as far as requiring SSL and
> such, would it be possible to extend that to depend on certain SSL
> backends instead of SSL in general? Otherwise this problem will just
> get worse as more types of pinning code is added and only supported in a
> few backends.
Isn't that only for openssl and if so why not just change the features
from SSL to OpenSSL, wouldn't that solve the problem easily
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2014-11-04