comparison patches/0001-Implement-CURLOPT_SSLVERSION-for-polarssl.patch @ 1008:2fb6071c6669

Merged
author Emanuel Schuetze <emanuel@intevation.de>
date Tue, 02 Sep 2014 11:55:15 +0200
parents 0570b1e562c2
children
comparison
equal deleted inserted replaced
1007:b75bd6686f43 1008:2fb6071c6669
1 From bebf7d617091042828fc5838170b35c42ab60396 Mon Sep 17 00:00:00 2001
2 From: Andre Heinecke <aheinecke@intevation.de>
3 Date: Mon, 1 Sep 2014 16:06:03 +0200
4 Subject: [PATCH 1/3] Implement CURLOPT_SSLVERSION for polarssl
5
6 Forwards the setting as minimum ssl version to polarssl.
7 If the server does not support the requested version the
8 SSL Handshake will fail.
9 ---
10 lib/vtls/polarssl.c | 21 +++++++++++++++++++++
11 1 file changed, 21 insertions(+)
12
13 diff --git a/lib/vtls/polarssl.c b/lib/vtls/polarssl.c
14 index f948486..e18cadf 100644
15 --- a/lib/vtls/polarssl.c
16 +++ b/lib/vtls/polarssl.c
17 @@ -270,6 +270,27 @@ polarssl_connect_step1(struct connectdata *conn,
18 return CURLE_SSL_CONNECT_ERROR;
19 }
20
21 + if(data->set.ssl.version == CURL_SSLVERSION_SSLv3) {
22 + ssl_set_min_version(&connssl->ssl, SSL_MAJOR_VERSION_3,
23 + SSL_MINOR_VERSION_0);
24 + infof(data, "PolarSSL: Forced min. SSL Version to be SSLv3\n");
25 + }
26 + else if(data->set.ssl.version == CURL_SSLVERSION_TLSv1_0) {
27 + ssl_set_min_version(&connssl->ssl, SSL_MAJOR_VERSION_3,
28 + SSL_MINOR_VERSION_1);
29 + infof(data, "PolarSSL: Forced min. SSL Version to be TLS 1.0\n");
30 + }
31 + else if(data->set.ssl.version == CURL_SSLVERSION_TLSv1_1) {
32 + ssl_set_min_version(&connssl->ssl, SSL_MAJOR_VERSION_3,
33 + SSL_MINOR_VERSION_2);
34 + infof(data, "PolarSSL: Forced min. SSL Version to be TLS 1.1\n");
35 + }
36 + else if(data->set.ssl.version == CURL_SSLVERSION_TLSv1_2) {
37 + ssl_set_min_version(&connssl->ssl, SSL_MAJOR_VERSION_3,
38 + SSL_MINOR_VERSION_3);
39 + infof(data, "PolarSSL: Forced min. SSL Version to be TLS 1.2\n");
40 + }
41 +
42 ssl_set_endpoint(&connssl->ssl, SSL_IS_CLIENT);
43 ssl_set_authmode(&connssl->ssl, SSL_VERIFY_OPTIONAL);
44
45 --
46 1.9.1
47

http://wald.intevation.org/projects/trustbridge/