mirror of
https://github.com/moparisthebest/curl
synced 2024-12-21 23:58:49 -05:00
work-around SSL implementation flaws better, pointed out in bug report
#745122.
This commit is contained in:
parent
4eb2a6c9a3
commit
d288222e80
10
lib/ssluse.c
10
lib/ssluse.c
@ -786,6 +786,16 @@ Curl_SSLConnect(struct connectdata *conn)
|
||||
return CURLE_OUT_OF_MEMORY;
|
||||
}
|
||||
|
||||
/* OpenSSL contains code to work-around lots of bugs and flaws in various
|
||||
SSL-implementations. SSL_CTX_set_options() is used to enabled those
|
||||
work-arounds. The man page for this option states that SSL_OP_ALL enables
|
||||
ll the work-arounds and that "It is usually safe to use SSL_OP_ALL to
|
||||
enable the bug workaround options if compatibility with somewhat broken
|
||||
implementations is desired."
|
||||
|
||||
*/
|
||||
SSL_CTX_set_options(conn->ssl.ctx, SSL_OP_ALL);
|
||||
|
||||
if(data->set.cert) {
|
||||
if (!cert_stuff(conn,
|
||||
data->set.cert,
|
||||
|
Loading…
Reference in New Issue
Block a user