1
0
mirror of https://github.com/moparisthebest/curl synced 2024-11-10 19:45:04 -05:00
curl/lib/vtls
Jay Satiro 2e5651a5ce vtls: fix ssl version "or later" behavior change for many backends
- Treat CURL_SSLVERSION_MAX_NONE the same as
  CURL_SSLVERSION_MAX_DEFAULT. Prior to this change NONE would mean use
  the minimum version also as the maximum.

This is a follow-up to 6015cef which changed the behavior of setting
the SSL version so that the requested version would only be the minimum
and not the maximum. It appears it was (mostly) implemented in OpenSSL
but not other backends. In other words CURL_SSLVERSION_TLSv1_0 used to
mean use just TLS v1.0 and now it means use TLS v1.0 *or later*.

- Fix CURL_SSLVERSION_MAX_DEFAULT for OpenSSL.

Prior to this change CURL_SSLVERSION_MAX_DEFAULT with OpenSSL was
erroneously treated as always TLS 1.3, and would cause an error if
OpenSSL was built without TLS 1.3 support.

Co-authored-by: Daniel Gustafsson

Fixes https://github.com/curl/curl/issues/2969
Closes https://github.com/curl/curl/pull/3012
2018-09-20 14:12:25 -04:00
..
axtls.c axtls: follow-up spell fix of comment 2018-06-02 13:40:41 +02:00
axtls.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
cyassl.c wolfSSL/CyaSSL: Fix memory leak in Curl_cyassl_random 2018-07-26 16:21:59 +02:00
cyassl.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
darwinssl.c vtls: fix ssl version "or later" behavior change for many backends 2018-09-20 14:12:25 -04:00
darwinssl.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
gskit.c vtls: fix ssl version "or later" behavior change for many backends 2018-09-20 14:12:25 -04:00
gskit.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
gtls.c vtls: fix ssl version "or later" behavior change for many backends 2018-09-20 14:12:25 -04:00
gtls.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
mbedtls.c vtls: fix ssl version "or later" behavior change for many backends 2018-09-20 14:12:25 -04:00
mbedtls.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
mesalink.c vtls: add a MesaLink vtls backend 2018-09-13 08:26:37 +02:00
mesalink.h vtls: add a MesaLink vtls backend 2018-09-13 08:26:37 +02:00
nss.c vtls: fix ssl version "or later" behavior change for many backends 2018-09-20 14:12:25 -04:00
nssg.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
openssl.c vtls: fix ssl version "or later" behavior change for many backends 2018-09-20 14:12:25 -04:00
openssl.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
polarssl_threadlock.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
polarssl_threadlock.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
polarssl.c vtls: fix ssl version "or later" behavior change for many backends 2018-09-20 14:12:25 -04:00
polarssl.h vtls: fold the backend ID into the Curl_ssl structure 2017-08-28 14:56:58 +02:00
schannel_verify.c sendf: Fix whitespace in infof/failf concatenation 2018-09-13 10:47:45 +02:00
schannel.c vtls: fix ssl version "or later" behavior change for many backends 2018-09-20 14:12:25 -04:00
schannel.h boringssl + schannel: undef X509_NAME in lib/schannel.h 2018-06-08 23:25:17 +02:00
vtls.c vtls: add a MesaLink vtls backend 2018-09-13 08:26:37 +02:00
vtls.h vtls: add a MesaLink vtls backend 2018-09-13 08:26:37 +02:00