darwinssl: enable BEAST workaround on iOS 7 & later
authorNick Zitzmann <nickzman@gmail.com>
Thu, 19 Sep 2013 22:28:54 +0000 (17:28 -0500)
committerNick Zitzmann <nickzman@gmail.com>
Thu, 19 Sep 2013 22:28:54 +0000 (17:28 -0500)
commit6f78aaad6f262f1de074386dff3f41c95fa997bb
treee7365752e9df771cca9f0d88cfbd1649c49aaaf2
parent89d320c2fd160a0e1fe0b7602211fb320e87d1f2
darwinssl: enable BEAST workaround on iOS 7 & later

iOS 7 finally added the option to enable 1/n-1 when using TLS 1.0
and a CBC cipher, so we now always turn that on unless the user
manually turns it off using CURLSSLOPT_ALLOW_BEAST.

It appears Apple also added some new PSK ciphers, but no interface to
use them yet, so we at least support printing them if we find them.
lib/curl_darwinssl.c