• Daniel Stenberg's avatar
    CURLOPT_SSL_OPTIONS: added · 2a699bc6
    Daniel Stenberg authored
    Allow an appliction to set libcurl specific SSL options. The first and
    only options supported right now is CURLSSLOPT_ALLOW_BEAST.
    
    It will make libcurl to disable any work-arounds the underlying SSL
    library may have to address a known security flaw in the SSL3 and TLS1.0
    protocol versions.
    
    This is a reaction to us unconditionally removing that behavior after
    this security advisory:
    
    http://curl.haxx.se/docs/adv_20120124B.html
    
    ... it did however cause a lot of programs to fail because of old
    servers not liking this work-around. Now programs can opt to decrease
    the security in order to interoperate with old servers better.
    2a699bc6