On 11/12/2014 11:46 PM, Praveen Pvs wrote:
> Due to SSL3 POODLE vulnerability
> (http://security.stackexchange.com/questions/70719/ssl3-poodle-vulnerability),
> i was asked to use TLS instead of SSL.
>
> I was wondering how to set these options, could any one help me with
> which options i need to set to use TLS instead of SSL.

Set CURLOPT_SSLVERSION to CURL_SSLVERSION_TLSv1 for TLS 1.x. As noted in
the documentation [1] and changelog [2] SSLv3 is disabled by default in
curl 7.39 which was released a few days ago.

[1]: http://curl.haxx.se/libcurl/c/CURLOPT_SSLVERSION.html
[2]: http://curl.haxx.se/changes.html

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2014-11-13