Daniel Stenberg wrote: > On Fri, 4 Mar 2016, Gisle Vanem wrote: > >> I'm built libcurl using BoringSSL (MSVC-2015) but it crashes for a very good >> reason. Here is the call-stack (slightly >> edited): > > David Benjamin in the BoringSSL team produced a patch for this problem and > it'd be great if you could try it out: > > Issue: https://boringssl-review.googlesource.com/#/c/7333/ > > Patch (in a zip file!): > https://boringssl-review.googlesource.com/changes/7333/revisions/db3f39249db2fb729520192462b5458fdecc6eb2/patch?zip > > (The patch is available through the download link on the top right corner on > the issue page.)
Thanks Daniel and David. I applied that diff and rebuilt. libcurl with BoringSSL now works as expected. Tested with: curl -o test_ssl.html https://www.ssllabs.com/ssltest/viewMyClient.html lynx -dump test_ssl.html which says: ... Protocols TLS 1.2 Yes* TLS 1.1 Yes* TLS 1.0 Yes* SSL 3 Yes* SSL 2 No (*) Without JavaScript, this test reliably detects only the highest supported protocol. ------ David, how could this have gone unnoticed for so long? -- --gv ------------------------------------------------------------------- List admin: https://cool.haxx.se/list/listinfo/curl-library Etiquette: https://curl.haxx.se/mail/etiquette.html
