darwinssl: block TLS_RSA_WITH_NULL_SHA256 cipher
authorNick Zitzmann <nickzman@gmail.com>
Thu, 3 Oct 2013 02:19:28 +0000 (21:19 -0500)
committerNick Zitzmann <nickzman@gmail.com>
Thu, 3 Oct 2013 02:19:28 +0000 (21:19 -0500)
Credit (for catching a cipher I forgot to add to the blocked ciphers list):
https://www.ssllabs.com/ssltest/viewMyClient.html

lib/curl_darwinssl.c

index 211252f..43fe053 100644 (file)
@@ -1330,6 +1330,7 @@ static CURLcode darwinssl_connect_step1(struct connectdata *conn,
         case SSL_NULL_WITH_NULL_NULL:
         case SSL_RSA_WITH_NULL_MD5:
         case SSL_RSA_WITH_NULL_SHA:
+        case 0x003B: /* TLS_RSA_WITH_NULL_SHA256 */
         case SSL_FORTEZZA_DMS_WITH_NULL_SHA:
         case 0xC001: /* TLS_ECDH_ECDSA_WITH_NULL_SHA */
         case 0xC006: /* TLS_ECDHE_ECDSA_WITH_NULL_SHA */