Commit 82f55836 authored by Marc Hoersken's avatar Marc Hoersken
Browse files

winssl: improved default SSL/TLS protocol selection 

For some reason Windows 7 SP1 chooses TLS 1.0 instead of TLS 1.2
if it is not explicitly enabled within grbitEnabledProtocols.

More information can be found on MSDN:
http://msdn.microsoft.com/library/windows/desktop/aa379810.aspx
parent 6fb34ea6

lib/vtls/curl_schannel.c

+6 −0
Original line number Diff line number Diff line
@@ -195,6 +195,12 @@ schannel_connect_step1(struct connectdata *conn, int sockindex) 
      case CURL_SSLVERSION_SSLv2:

        schannel_cred.grbitEnabledProtocols = SP_PROT_SSL2_CLIENT;

        break;

      default:

        schannel_cred.grbitEnabledProtocols = SP_PROT_TLS1_0_CLIENT |

                                              SP_PROT_TLS1_1_CLIENT |

                                              SP_PROT_TLS1_2_CLIENT |

                                              SP_PROT_SSL3_CLIENT;

        break;

    }



    /* allocate memory for the re-usable credential handle */