gnustep/libs-base
0
0
Fork 0
mirror of https://github.com/gnustep/libs-base.git synced 2025-05-30 00:11:26 +00:00
Code Issues Projects Releases Packages Wiki Activity

Bugfix for TLS server sessions

Browse source
This commit is contained in:
Richard Frith-Macdonald 2019-09-21 09:42:27 +01:00
parent de9740cda4
commit b3f5a3440d
2 changed files with 21 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

26
Source/GSTLS.m
View file

@ -1703,15 +1703,6 @@ retrieve_callback(gnutls_session_t session,
str = nil;
}
#if GNUTLS_VERSION_NUMBER < 0x020C00
gnutls_set_default_priority(session);
#else
/* By default we disable SSL3.0 as the 'POODLE' attack (Oct 2014)
* renders it insecure.
*/
gnutls_priority_set_direct(session, "NORMAL:-VERS-SSL3.0", NULL);
#endif
if (nil == str)
{
if ([pri isEqual: NSStreamSocketSecurityLevelNone] == YES)
@ -1758,15 +1749,28 @@ retrieve_callback(gnutls_session_t session,
#else
gnutls_priority_set_direct(session,
"NORMAL:-VERS-SSL3.0:+VERS-TLS-ALL", NULL);
#endif
}
else
{
#if GNUTLS_VERSION_NUMBER < 0x020C00
gnutls_set_default_priority(session);
#else
/* By default we disable SSL3.0 as the 'POODLE' attack (Oct 2014)
* renders it insecure.
*/
gnutls_priority_set_direct(session, "NORMAL:-VERS-SSL3.0", NULL);
#endif
}
}
#if GNUTLS_VERSION_NUMBER >= 0x020C00
else
{
#if GNUTLS_VERSION_NUMBER >= 0x020C00
gnutls_priority_set_direct(session, [str UTF8String], NULL);
}
#else
gnutls_set_default_priority(session);
#endif
}
/* Set certificate credentials for this session.
*/