From e32b13e226c48746cedbcfc2c2c427d5ff87b61a Mon Sep 17 00:00:00 2001 From: Shyotl Date: Tue, 9 Jul 2019 21:39:21 -0500 Subject: [PATCH] Disable old hack that was breaking ssl connections, as LL now uses TLS1.1. --- indra/llmessage/aicurl.cpp | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/indra/llmessage/aicurl.cpp b/indra/llmessage/aicurl.cpp index 70bd956c8..c96909772 100644 --- a/indra/llmessage/aicurl.cpp +++ b/indra/llmessage/aicurl.cpp @@ -1077,7 +1077,7 @@ CURLcode CurlEasyRequest::curlCtxCallback(CURL* curl, void* sslctx, void* parm) // Also turn off SSL v2, which is highly broken and strongly discouraged[1]. // [1] http://www.openssl.org/docs/ssl/SSL_CTX_set_options.html#SECURE_RENEGOTIATION long options = SSL_OP_NO_SSLv2; -#ifdef SSL_OP_NO_TLSv1_1 // Only defined for openssl version 1.0.1 and up. +/*#ifdef SSL_OP_NO_TLSv1_1 // Only defined for openssl version 1.0.1 and up. if (need_renegotiation_hack) { // This option disables openssl to use TLS version 1.1. @@ -1095,7 +1095,7 @@ CURLcode CurlEasyRequest::curlCtxCallback(CURL* curl, void* sslctx, void* parm) // This is expected when you compile against the headers of a version < 1.0.1 and then link at runtime with version >= 1.0.1. // Don't do that. llassert_always(!need_renegotiation_hack); -#endif +#endif*/ SSL_CTX_set_options(ctx, options); return CURLE_OK; }