From 777af4c8ec7b73d3c2376091401c00cb945cd6fc Mon Sep 17 00:00:00 2001 From: Dan Winship Date: Wed, 3 Jun 2009 20:13:38 -0400 Subject: More temporary SSL tweaking Disable TLS 1.0 too, since some sites don't even support that (I'm looking at you, PayPal). Eventually we'll want to make this be more clever, and have it first try TLS 1.1 with extensions, and then fall back to SSL 3.0 if the server gets confused by the new stuff. But that will take some rewriting. --- libsoup/soup-gnutls.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libsoup/soup-gnutls.c b/libsoup/soup-gnutls.c index 90acb5b9..46b4188e 100644 --- a/libsoup/soup-gnutls.c +++ b/libsoup/soup-gnutls.c @@ -447,7 +447,7 @@ soup_ssl_wrap_iochannel (GIOChannel *sock, gboolean non_blocking, goto THROW_CREATE_ERROR; /* See http://bugzilla.gnome.org/show_bug.cgi?id=581342 */ - if (gnutls_priority_set_direct (session, "NORMAL:!VERS-TLS1.1", NULL) != 0) + if (gnutls_priority_set_direct (session, "NORMAL:!VERS-TLS1.1:!VERS-TLS1.0", NULL) != 0) goto THROW_CREATE_ERROR; if (gnutls_credentials_set (session, GNUTLS_CRD_CERTIFICATE, -- cgit v1.2.1