From aa438d34d2c5e99ceff437deeb50adf182399ee4 Mon Sep 17 00:00:00 2001 From: John-Mark Bell Date: Sun, 4 Nov 2012 16:01:05 +0000 Subject: Only disable TLS1.2 if it can be disabled. --- content/fetchers/curl.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/content/fetchers/curl.c b/content/fetchers/curl.c index 0600fc941..400d0efcf 100644 --- a/content/fetchers/curl.c +++ b/content/fetchers/curl.c @@ -669,8 +669,10 @@ fetch_curl_sslctxfun(CURL *curl_handle, void *_sslctx, void *parm) SSL_CTX_set_verify(sslctx, SSL_VERIFY_PEER, fetch_curl_verify_callback); SSL_CTX_set_cert_verify_callback(sslctx, fetch_curl_cert_verify_callback, parm); +#ifdef SSL_OP_NO_TLSv1_2 /* Disable TLS1.2, as it causes some servers to stall. */ SSL_CTX_set_options(sslctx, SSL_OP_NO_TLSv1_2); +#endif return CURLE_OK; } -- cgit v1.2.3