OpenSSL: Fix forcing SSLv3 connections
authorBarry Abrahamson <barry@automattic.com>
Wed, 1 Jan 2014 22:50:45 +0000 (23:50 +0100)
committerDaniel Stenberg <daniel@haxx.se>
Thu, 2 Jan 2014 22:41:33 +0000 (23:41 +0100)
commit4bb74005298bb0c517360582b90efafd540bf8f1
tree80e7101eee33ca56a5495adca9622c45fdab037f
parent303172d220669774c53cc8ffd244ce82a72b737d
OpenSSL: Fix forcing SSLv3 connections

Some feedback provided by byte_bucket on IRC pointed out that commit
db11750cfa5b1 wasn’t really correct because it allows for “upgrading” to a
newer protocol when it should be only allowing for SSLv3.

This change fixes that.

When SSLv3 connection is forced, don't allow SSL negotiations for newer
versions.  Feedback provided by byte_bucket in #curl.  This behavior is
also consistent with the other force flags like --tlsv1.1 which doesn't
allow for TLSv1.2 negotiation, etc

Feedback-by: byte_bucket
Bug: http://curl.haxx.se/bug/view.cgi?id=1319
lib/vtls/openssl.c