granicus.if.org Git - curl/commit

author	Yang Tse <yangsita@gmail.com>
	Wed, 18 Jan 2012 03:33:49 +0000 (04:33 +0100)
committer	Yang Tse <yangsita@gmail.com>
	Wed, 18 Jan 2012 10:59:20 +0000 (11:59 +0100)
commit	a20daf90e358c1476a325ea665d533f7a27e3364
tree	d78d7d5e27923961a01d0f2dbd3b63aa279258e6	tree \| snapshot
parent	24526d0c0f4209eb77c807afdb15da301c7d021b	commit \| diff

OpenSSL: SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG option is no longer enabled

SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG option enabling allowed successfull
interoperability with web server Netscape Enterprise Server 2.0.1 released
back in 1996 more than 15 years ago.

Due to CVE-2010-4180, option SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG has
become ineffective as of OpenSSL 0.9.8q and 1.0.0c. In order to mitigate
CVE-2010-4180 when using previous OpenSSL versions we no longer enable
this option regardless of OpenSSL version and SSL_OP_ALL definition.