diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2012-02-06 22:25:04 +0100 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2012-02-09 22:28:58 +0100 |
| commit | 62d15f159e163bf4e1a27ac1b0ffd9b84e02bf56 (patch) | |
| tree | 814274226306bf3baeeeef30c5baa2aadd50f9a4 /src/tool_getparam.c | |
| parent | 2a699bc6e94b8223d900e8880ad628aebf17ab6d (diff) | |
| download | curl-62d15f159e163bf4e1a27ac1b0ffd9b84e02bf56.tar.gz | |
--ssl-allow-beast added
This new option tells curl to not work around a security flaw in the
SSL3 and TLS1.0 protocols. It uses the new libcurl option
CURLOPT_SSL_OPTIONS with the CURLSSLOPT_ALLOW_BEAST bit set.
Diffstat (limited to 'src/tool_getparam.c')
| -rw-r--r-- | src/tool_getparam.c | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/src/tool_getparam.c b/src/tool_getparam.c index bd7375fd9..e65371f3e 100644 --- a/src/tool_getparam.c +++ b/src/tool_getparam.c @@ -5,7 +5,7 @@ * | (__| |_| | _ <| |___ * \___|\___/|_| \_\_____| * - * Copyright (C) 1998 - 2011, Daniel Stenberg, <daniel@haxx.se>, et al. + * Copyright (C) 1998 - 2012, Daniel Stenberg, <daniel@haxx.se>, et al. * * This software is licensed as described in the file COPYING, which * you should have received as part of this distribution. The terms @@ -202,6 +202,7 @@ static const struct LongShort aliases[]= { {"Ek", "tlsuser", TRUE}, {"El", "tlspassword", TRUE}, {"Em", "tlsauthtype", TRUE}, + {"En", "ssl-no-empty-fragments", FALSE}, {"f", "fail", FALSE}, {"F", "form", TRUE}, {"Fs", "form-string", TRUE}, @@ -1144,6 +1145,10 @@ ParameterError getparameter(char *flag, /* f or -long-flag */ else return PARAM_LIBCURL_DOESNT_SUPPORT; break; + case 'n': /* no empty SSL fragments */ + if(curlinfo->features & CURL_VERSION_SSL) + config->ssl_allow_beast = toggle; + break; default: /* certificate file */ { char *ptr = strchr(nextarg, ':'); |