OpenSSL: Fix forcing SSLv3 connections
authorBarry Abrahamson <barry@automattic.com>
Wed, 1 Jan 2014 04:28:35 +0000 (05:28 +0100)
committerDaniel Stenberg <daniel@haxx.se>
Wed, 1 Jan 2014 20:36:47 +0000 (21:36 +0100)
Since ad34a2d5c87c7f4b14e8dded3 (present in 7.34.0 release) forcing
SSLv3 will always return the error "curl: (35) Unsupported SSL protocol
version" Can be replicated with `curl -I -3 https://www.google.com/`.
This fix simply allows for v3 to be forced.

lib/vtls/openssl.c

index 7a21c73..bc22bb8 100644 (file)
@@ -1551,6 +1551,7 @@ ossl_connect_step1(struct connectdata *conn,
 
   switch(data->set.ssl.version) {
   case CURL_SSLVERSION_DEFAULT:
+  case CURL_SSLVERSION_SSLv3:
     ctx_options |= SSL_OP_NO_SSLv2;
 #ifdef USE_TLS_SRP
     if(data->set.ssl.authtype == CURL_TLSAUTH_SRP) {