Skip to content

Commit 84f2299

Browse files
author
Felipe Zimmerle
committed
mlogc: Changes the default SSL algo to TLS 1.2
As reported by Josh Amishav-Zlatin, mlogc was making usage of SSLv3 instead of TLS 1.2. Servers should not answer SSLv3 after poodle.
1 parent 8388974 commit 84f2299

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

mlogc/mlogc.c

+2-2
Original file line numberDiff line numberDiff line change
@@ -1218,8 +1218,8 @@ static void logc_init(void)
12181218
curl_easy_setopt(curl, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
12191219
curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, FALSE);
12201220
curl_easy_setopt(curl, CURLOPT_SSL_VERIFYHOST, 0);
1221-
/* SSLv3 works better overall as some servers have issues with TLS */
1222-
curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_SSLv3);
1221+
curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_2);
1222+
12231223
curl_easy_setopt(curl, CURLOPT_CONNECTTIMEOUT, 15);
12241224
curl_easy_setopt(curl, CURLOPT_NOSIGNAL, TRUE);
12251225
curl_easy_setopt(curl, CURLOPT_HEADER, TRUE);

0 commit comments

Comments
 (0)