SSL: PolarSSL default min SSL version TLS 1.0

- Prior to this change no SSL minimum version was set by default at
runtime for PolarSSL. Therefore in most cases PolarSSL would probably
have defaulted to a minimum version of SSLv3 which is no longer secure.
This commit is contained in:
Jay Satiro 2014-10-24 14:26:57 -04:00 committed by Daniel Stenberg
parent fb24990211
commit e819c3a4ca
1 changed files with 5 additions and 0 deletions

View File

@ -287,6 +287,11 @@ polarssl_connect_step1(struct connectdata *conn,
}
switch(data->set.ssl.version) {
default:
case CURL_SSLVERSION_DEFAULT:
ssl_set_min_version(&connssl->ssl, SSL_MAJOR_VERSION_3,
SSL_MINOR_VERSION_1);
break;
case CURL_SSLVERSION_SSLv3:
ssl_set_min_version(&connssl->ssl, SSL_MAJOR_VERSION_3,
SSL_MINOR_VERSION_0);