Changelog
+Daniel S (25 Feb 2008)
+- Kaspar Brand made GnuTLS-built libcurl properly acknowledge the option that
+ forces it to prefer SSLv3.
+
Daniel S (23 Feb 2008)
- Sam Listopad provided a patch in feature-request #1900014
http://curl.haxx.se/bug/feature.cgi?id=1900014 that makes libcurl (built to
o bad re-use of SSL connections in non-complete state
o test case 405 failures with GnuTLS builds
o crash when connection cache size is 1 and Curl_do() failed
+ o GnuTLS-built libcurl can now be forced to prefer SSLv3
This release includes the following known bugs:
if(!gtls_inited)
_Curl_gtls_init();
- /* GnuTLS only supports TLSv1 (and SSLv3?) */
+ /* GnuTLS only supports SSLv3 and TLSv1 */
if(data->set.ssl.version == CURL_SSLVERSION_SSLv2) {
failf(data, "GnuTLS does not support SSLv2");
return CURLE_SSL_CONNECT_ERROR;
if(rc < 0)
return CURLE_SSL_CONNECT_ERROR;
+ if(data->set.ssl.version == CURL_SSLVERSION_SSLv3) {
+ int protocol_priority[] = { GNUTLS_SSL3, 0 };
+ gnutls_protocol_set_priority(session, protocol_priority);
+ if(rc < 0)
+ return CURLE_SSL_CONNECT_ERROR;
+ }
+
/* Sets the priority on the certificate types supported by gnutls. Priority
is higher for types specified before others. After specifying the types
you want, you must append a 0. */