Commit54bf71f

Felipe Zimmerle

committed

mlogc: Changes the default SSL algo to TLS 1.2

As reported by Josh Amishav-Zlatin, mlogc was making usage of SSLv3 instead ofTLS 1.2. Servers should not answer SSLv3 after poodle.

1 parentd554b94 commit54bf71fCopy full SHA for 54bf71f

File tree

-2

lines changed

-2

lines changed

Lines changed: 2 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -1218,8 +1218,8 @@ static void logc_init(void)`
`1218`	`1218`	`curl_easy_setopt(curl,CURLOPT_HTTPAUTH,CURLAUTH_BASIC);`
`1219`	`1219`	`curl_easy_setopt(curl,CURLOPT_SSL_VERIFYPEER, FALSE);`
`1220`	`1220`	`curl_easy_setopt(curl,CURLOPT_SSL_VERIFYHOST,0);`
`1221`		`-/* SSLv3 works better overall as some servers have issues with TLS */`
`1222`		`-curl_easy_setopt(curl,CURLOPT_SSLVERSION,CURL_SSLVERSION_SSLv3);`
	`1221`	`+curl_easy_setopt(curl,CURLOPT_SSLVERSION,CURL_SSLVERSION_TLSv1_2);`
	`1222`	`+`
`1223`	`1223`	`curl_easy_setopt(curl,CURLOPT_CONNECTTIMEOUT,15);`
`1224`	`1224`	`curl_easy_setopt(curl,CURLOPT_NOSIGNAL, TRUE);`
`1225`	`1225`	`curl_easy_setopt(curl,CURLOPT_HEADER, TRUE);`

Comments

(0)