darwinssl: SSLv2 connections are aborted if unsupported by the OS
authorNick Zitzmann <nickzman@gmail.com>
Wed, 3 Jul 2013 01:34:54 +0000 (19:34 -0600)
committerNick Zitzmann <nickzman@gmail.com>
Wed, 3 Jul 2013 01:34:54 +0000 (19:34 -0600)
commitd633052905d430565db47d22dfc42011a3ca2c01
treeda2aeb60ef4139b4631bd3688924dede056cf073
parentabca89aaa0fb208cfaf4ead6692014c4e553388a
darwinssl: SSLv2 connections are aborted if unsupported by the OS

I just noticed that OS X no longer supports SSLv2. Other TLS engines return
an error if the requested protocol isn't supported by the underlying
engine, so we do that now for SSLv2 if the framework returns an error
when trying to turn on SSLv2 support. (Note: As always, SSLv2 support is
only enabled in curl when starting the app with the -2 argument; it's off
by default. SSLv2 is really old and insecure.)
lib/curl_darwinssl.c