6 Commits

Author	SHA1	Message	Date
Daniel Stenberg	8250f93d41	CURLOPT_CAPATH: return failure if set without backend support	2014-09-13 14:56:27 +02:00
Daniel Stenberg	a439e438f3	ssl: generalize how the ssl backend identifier is set ... Each backend now defines CURL_SSL_BACKEND accordingly. Added the *AXTLS one which was missing previously.	2014-07-31 12:19:51 +02:00
Daniel Stenberg	8dfd22089c	vtls: make the random function mandatory in the TLS backend ... To force each backend implementation to really attempt to provide proper random. If a proper random function is missing, then we can explicitly make use of the default one we use when TLS support is missing. This commit makes sure it works for darwinssl, gnutls, nss and openssl.	2014-07-30 00:05:47 +02:00
Daniel Stenberg	3b5c75ef3d	OpenSSL: deselect weak ciphers by default ... By default even recent versions of OpenSSL support and accept both "export strength" ciphers, small-bitsize ciphers as well as downright deprecated ones. This change sets a default cipher set that avoids the worst ciphers, and subsequently makes https://www.howsmyssl.com/a/check no longer grade curl/OpenSSL connects as 'Bad'. Bug: http://curl.haxx.se/bug/view.cgi?id=1323 Reported-by: Jeff Hodges	2014-01-12 00:14:01 +01:00
Steve Holme	f88f9bed00	vtls: Updated comments referencing sslgen.c and ssluse.c	2013-12-26 21:42:22 +00:00
Daniel Stenberg	92b9ae5c5d	openssl: renamed backend files to openssl.[ch]	2013-12-20 17:12:42 +01:00