GTlsClientConnection: loosen the semantics of "use-ssl3"
authorDan Winship <danw@gnome.org>
Sat, 22 Nov 2014 15:54:41 +0000 (10:54 -0500)
committerDan Winship <danw@gnome.org>
Sat, 22 Nov 2014 16:02:22 +0000 (11:02 -0500)
commit7f5c862e166a6f288d8d0ec2622685316f64b87c
tree58b91bbc1f1c72e4a48e4b2c46bce11018b9f880
parentf6bbd19beb41aeb52426ba96b3c39c1b09f6bc17
GTlsClientConnection: loosen the semantics of "use-ssl3"

If SSL 3.0 has been disabled (at the host, application, or library
level), then the "use-ssl3" property becomes a "fail-immediately"
property.

Despite the name, the point of the property wasn't really specifically
to use SSL 3.0; it was to allow fallback when talking to broken
servers that do SSL/TLS negotiation incorrectly and break when they
see unexpectedly-high version numbers. So if we can't fall back to SSL
3.0, then the "use-ssl3" property should fall back to TLS 1.0 instead
(since there are hosts that will reject a TLS 1.2 handshake, but
accept a TLS 1.0 one).

glib-networking is being updated to implement that behavior, so update
the documentation here.

https://bugzilla.gnome.org/show_bug.cgi?id=738633
gio/gtlsclientconnection.c