Commit 173160c0 authored by Nick Zitzmann's avatar Nick Zitzmann
Browse files

darwinssl: block TLS_RSA_WITH_NULL_SHA256 cipher 

Credit (for catching a cipher I forgot to add to the blocked ciphers list):
https://www.ssllabs.com/ssltest/viewMyClient.html
parent 3c3622b6

lib/curl_darwinssl.c

+1 −0
Original line number Diff line number Diff line
@@ -1330,6 +1330,7 @@ static CURLcode darwinssl_connect_step1(struct connectdata *conn, 
        case SSL_NULL_WITH_NULL_NULL:

        case SSL_RSA_WITH_NULL_MD5:

        case SSL_RSA_WITH_NULL_SHA:

        case 0x003B: /* TLS_RSA_WITH_NULL_SHA256 */

        case SSL_FORTEZZA_DMS_WITH_NULL_SHA:

        case 0xC001: /* TLS_ECDH_ECDSA_WITH_NULL_SHA */

        case 0xC006: /* TLS_ECDHE_ECDSA_WITH_NULL_SHA */