diff options
author | John-Mark Bell <jmb@netsurf-browser.org> | 2014-01-17 01:09:24 +0000 |
---|---|---|
committer | John-Mark Bell <jmb@netsurf-browser.org> | 2014-01-19 22:57:16 +0000 |
commit | 4a014b61befdf1ad54c9fcf90071977e7b3cbe12 (patch) | |
tree | 4d6ea3ad4515002308a6317f88c50dd8be03b627 /content/fetchers/curl.c | |
parent | 8e1fe5d1a9501e7a9b50be41994ed3e92b9cc6ae (diff) | |
download | netsurf-4a014b61befdf1ad54c9fcf90071977e7b3cbe12.tar.gz netsurf-4a014b61befdf1ad54c9fcf90071977e7b3cbe12.tar.bz2 |
Enable TLS 1.2 support again.
Diffstat (limited to 'content/fetchers/curl.c')
-rw-r--r-- | content/fetchers/curl.c | 8 |
1 files changed, 3 insertions, 5 deletions
diff --git a/content/fetchers/curl.c b/content/fetchers/curl.c index 92d4625b5..bc6b2c338 100644 --- a/content/fetchers/curl.c +++ b/content/fetchers/curl.c @@ -688,16 +688,14 @@ fetch_curl_sslctxfun(CURL *curl_handle, void *_sslctx, void *parm) parm); if (f->downgrade_tls) { + /* Disable TLS 1.1/1.2 if the server can't cope with them */ #ifdef SSL_OP_NO_TLSv1_1 - /* Disable TLS1.1, if the server can't cope with it */ options |= SSL_OP_NO_TLSv1_1; #endif - } - #ifdef SSL_OP_NO_TLSv1_2 - /* Disable TLS1.2, as it causes some servers to stall. */ - options |= SSL_OP_NO_TLSv1_2; + options |= SSL_OP_NO_TLSv1_2; #endif + } SSL_CTX_set_options(sslctx, options); |