]> granicus.if.org Git - curl/commit
SSL: Remove SSLv3 from SSL default due to POODLE attack
authorJay Satiro <raysatiro@yahoo.com>
Fri, 24 Oct 2014 11:41:56 +0000 (13:41 +0200)
committerDaniel Stenberg <daniel@haxx.se>
Fri, 24 Oct 2014 11:41:56 +0000 (13:41 +0200)
commitec783dc142129d3860e542b443caaa78a6172d56
tree7062b5f480575be59252816c9877823fbde143c9
parent2b042574917aeff4d366dec23a7d007913cbe755
SSL: Remove SSLv3 from SSL default due to POODLE attack

- Remove SSLv3 from SSL default in darwinssl, schannel, cyassl, nss,
openssl effectively making the default TLS 1.x. axTLS is not affected
since it supports only TLS, and gnutls is not affected since it already
defaults to TLS 1.x.

- Update CURLOPT_SSLVERSION doc
docs/libcurl/opts/CURLOPT_SSLVERSION.3
lib/vtls/curl_darwinssl.c
lib/vtls/curl_schannel.c
lib/vtls/cyassl.c
lib/vtls/nss.c
lib/vtls/openssl.c