commit b88c772b96c2c0cce11fbf1012806bd11d6b1452
parent f4e859902a0541db982248ee4a59901e0568d381
Author: Andrej Kacian <ticho@claws-mail.org>
Date: Tue, 23 Aug 2016 17:47:24 +0200
Do not explicitly disable SSLv3 if GnuTLS does it already.
Starting with GnuTLS 3.4.0, SSL 3.0 is no longer
included in the default priorities list.
Diffstat:
1 file changed, 2 insertions(+), 0 deletions(-)
diff --git a/src/common/ssl.c b/src/common/ssl.c
@@ -330,9 +330,11 @@ gboolean ssl_init_socket(SockInfo *sockinfo)
debug_print("Setting GnuTLS priority to %s, status = %d\n",
sockinfo->gnutls_priority, r);
}
+#ifdef GNUTLS_VERSION_NUMBER < 0x030400
else {
gnutls_priority_set_direct(session, "NORMAL:-VERS-SSL3.0", NULL);
}
+#endif
gnutls_record_disable_padding(session);
gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE, xcred);