Commit 20c727ec authored by Jay Satiro's avatar Jay Satiro Committed by Daniel Stenberg
Browse files

polarssl: Fix exclusive SSL protocol version options 

Prior to this change the options for exclusive SSL protocol versions did
not actually set the protocol exclusive.

http://curl.haxx.se/mail/lib-2015-01/0002.html
Reported-by: Dan Fandrich
parent 9956ef2d

lib/vtls/polarssl.c

+9 −0
Original line number Diff line number Diff line
@@ -289,27 +289,36 @@ polarssl_connect_step1(struct connectdata *conn, 
  switch(data->set.ssl.version) {

  default:

  case CURL_SSLVERSION_DEFAULT:

  case CURL_SSLVERSION_TLSv1:

    ssl_set_min_version(&connssl->ssl, SSL_MAJOR_VERSION_3,

                        SSL_MINOR_VERSION_1);

    break;

  case CURL_SSLVERSION_SSLv3:

    ssl_set_min_version(&connssl->ssl, SSL_MAJOR_VERSION_3,

                        SSL_MINOR_VERSION_0);

    ssl_set_max_version(&connssl->ssl, SSL_MAJOR_VERSION_3,

                        SSL_MINOR_VERSION_0);

    infof(data, "PolarSSL: Forced min. SSL Version to be SSLv3\n");

    break;

  case CURL_SSLVERSION_TLSv1_0:

    ssl_set_min_version(&connssl->ssl, SSL_MAJOR_VERSION_3,

                        SSL_MINOR_VERSION_1);

    ssl_set_max_version(&connssl->ssl, SSL_MAJOR_VERSION_3,

                        SSL_MINOR_VERSION_1);

    infof(data, "PolarSSL: Forced min. SSL Version to be TLS 1.0\n");

    break;

  case CURL_SSLVERSION_TLSv1_1:

    ssl_set_min_version(&connssl->ssl, SSL_MAJOR_VERSION_3,

                        SSL_MINOR_VERSION_2);

    ssl_set_max_version(&connssl->ssl, SSL_MAJOR_VERSION_3,

                        SSL_MINOR_VERSION_2);

    infof(data, "PolarSSL: Forced min. SSL Version to be TLS 1.1\n");

    break;

  case CURL_SSLVERSION_TLSv1_2:

    ssl_set_min_version(&connssl->ssl, SSL_MAJOR_VERSION_3,

                        SSL_MINOR_VERSION_3);

    ssl_set_max_version(&connssl->ssl, SSL_MAJOR_VERSION_3,

                        SSL_MINOR_VERSION_3);

    infof(data, "PolarSSL: Forced min. SSL Version to be TLS 1.2\n");

    break;

  }