Disable old hack that was breaking ssl connections, as LL now uses TLS1.1.
This commit is contained in:
@@ -1077,7 +1077,7 @@ CURLcode CurlEasyRequest::curlCtxCallback(CURL* curl, void* sslctx, void* parm)
|
||||
// Also turn off SSL v2, which is highly broken and strongly discouraged[1].
|
||||
// [1] http://www.openssl.org/docs/ssl/SSL_CTX_set_options.html#SECURE_RENEGOTIATION
|
||||
long options = SSL_OP_NO_SSLv2;
|
||||
#ifdef SSL_OP_NO_TLSv1_1 // Only defined for openssl version 1.0.1 and up.
|
||||
/*#ifdef SSL_OP_NO_TLSv1_1 // Only defined for openssl version 1.0.1 and up.
|
||||
if (need_renegotiation_hack)
|
||||
{
|
||||
// This option disables openssl to use TLS version 1.1.
|
||||
@@ -1095,7 +1095,7 @@ CURLcode CurlEasyRequest::curlCtxCallback(CURL* curl, void* sslctx, void* parm)
|
||||
// This is expected when you compile against the headers of a version < 1.0.1 and then link at runtime with version >= 1.0.1.
|
||||
// Don't do that.
|
||||
llassert_always(!need_renegotiation_hack);
|
||||
#endif
|
||||
#endif*/
|
||||
SSL_CTX_set_options(ctx, options);
|
||||
return CURLE_OK;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user