aboutsummaryrefslogtreecommitdiffstats
path: root/url.c
diff options
context:
space:
mode:
authorse <se@example.com>2018-01-06 10:10:52 +0000
committerTatsuya Kinoshita <tats@debian.org>2018-01-06 10:10:52 +0000
commit1b23ebf6449de5975f057ead439cc66041249783 (patch)
treef4fd0f29c90d9871331d313fe33998aaf01a542b /url.c
parentAccept TERM=fbterm (diff)
downloadw3m-1b23ebf6449de5975f057ead439cc66041249783.tar.gz
w3m-1b23ebf6449de5975f057ead439cc66041249783.zip
Extend ssl_forbid_method to disable TLSv1.1
Origin: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874218#5
Diffstat (limited to '')
-rw-r--r--url.c4
1 files changed, 4 insertions, 0 deletions
diff --git a/url.c b/url.c
index 0378913..aae5a97 100644
--- a/url.c
+++ b/url.c
@@ -338,6 +338,10 @@ openSSLHandle(int sock, char *hostname, char **p_cert)
option |= SSL_OP_NO_TLSv1;
if (strchr(ssl_forbid_method, 'T'))
option |= SSL_OP_NO_TLSv1;
+ if (strchr(ssl_forbid_method, 't1.1'))
+ option |= SSL_OP_NO_TLSv1_1;
+ if (strchr(ssl_forbid_method, 'T1.1'))
+ option |= SSL_OP_NO_TLSv1_1;
}
#ifdef SSL_OP_NO_COMPRESSION
option |= SSL_OP_NO_COMPRESSION;