Commit d288222e authored by Daniel Stenberg's avatar Daniel Stenberg
Browse files

work-around SSL implementation flaws better, pointed out in bug report 

#745122.
parent 4eb2a6c9

lib/ssluse.c

+10 −0
Original line number Diff line number Diff line
@@ -786,6 +786,16 @@ Curl_SSLConnect(struct connectdata *conn) 
    return CURLE_OUT_OF_MEMORY;

  }



  /* OpenSSL contains code to work-around lots of bugs and flaws in various

     SSL-implementations. SSL_CTX_set_options() is used to enabled those

     work-arounds. The man page for this option states that SSL_OP_ALL enables

     ll the work-arounds and that "It is usually safe to use SSL_OP_ALL to

     enable the bug workaround options if compatibility with somewhat broken

     implementations is desired."



  */

  SSL_CTX_set_options(conn->ssl.ctx, SSL_OP_ALL);

    

  if(data->set.cert) {

    if (!cert_stuff(conn,

                    data->set.cert,