-VERS-TLS-ALL also removes VERS-SSL3.0.

Regards, Tim
From 018e8a4f0490f61c41d2e8df6ae5c9d56ea3039c Mon Sep 17 00:00:00 2001
From: Tim Ruehsen <[email protected]>
Date: Thu, 20 Dec 2012 13:07:30 +0100
Subject: [PATCH] fix --secure-protocol=SSLv2/SSLv3

---
 src/ChangeLog |    5 +++++
 src/gnutls.c  |    8 ++++----
 2 files changed, 9 insertions(+), 4 deletions(-)

diff --git a/src/ChangeLog b/src/ChangeLog
index ca8442a..973a26b 100644
--- a/src/ChangeLog
+++ b/src/ChangeLog
@@ -1,3 +1,8 @@
+2012-12-20  Tim Ruehsen  <[email protected]>
+
+	* gnutls.c (ssl_connect_wget): added +VERS-SSL3.0
+	to fix --secure-protocol=SSLv2/SSLv3
+
 2012-11-14  Tim Ruehsen  <[email protected]>
 
 	* warc.c (warc_write_block_from_file): fix off_t format string
diff --git a/src/gnutls.c b/src/gnutls.c
index af0b697..8e9dc80 100644
--- a/src/gnutls.c
+++ b/src/gnutls.c
@@ -401,7 +401,7 @@ ssl_connect_wget (int fd, const char *hostname)
       break;
     case secure_protocol_sslv2:
     case secure_protocol_sslv3:
-      err = gnutls_priority_set_direct (session, "NORMAL:-VERS-TLS-ALL", NULL);
+      err = gnutls_priority_set_direct (session, "NORMAL:-VERS-TLS-ALL:+VERS-SSL3.0", NULL);
       break;
     case secure_protocol_tlsv1:
       err = gnutls_priority_set_direct (session, "NORMAL:-VERS-SSL3.0", NULL);
-- 
1.7.10.4

Reply via email to