]> granicus.if.org Git - curl/commit
gnutls: enforced use of SSLv3
authorDaniel Stenberg <daniel@haxx.se>
Mon, 23 Jan 2012 22:53:06 +0000 (23:53 +0100)
committerDaniel Stenberg <daniel@haxx.se>
Tue, 24 Jan 2012 07:54:26 +0000 (08:54 +0100)
commit70f71bb99f7ed9f4164430507c0b03b84c7e0258
treed96c0897cf3aefbe60b8ffa2c24d4b43a1457b87
parentc11c30a8c8d727dcf5634fa0cc6ee0b4b77ddc3d
gnutls: enforced use of SSLv3

With advice from Nikos Mavrogiannopoulos, changed the priority string to
add "actual priorities" and favour ARCFOUR. This makes libcurl work
better when enforcing SSLv3 with GnuTLS. Both in the sense that the
libmicrohttpd test is now working again but also that it mitigates a
weakness in the older SSL/TLS protocols.

Bug: http://curl.haxx.se/mail/lib-2012-01/0225.html
Reported by: Christian Grothoff
lib/gtls.c