Hello team,

I want to put your attention to the proposed PR #11559 which would introduce the option in the subject.

Should we or should we not add this option?

This is a boolean option that when set, allows curl built to use OpenSSL to deal with *unsafe* TLS renegotiations.

There are legacy servers out there that insist on using unsafe renegotiations. curl using OpenSSL 3 will exit with an error when it runs into such a server. Unless we introduce an option for users to allow this insecure protocol detail.

See https://github.com/curl/curl/pull/11559 for the PR.

--

 / daniel.haxx.se
 | Commercial curl support up to 24x7 is available!
 | Private help, bug fixes, support, ports, new features
 | https://curl.se/support.html
--
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html

Reply via email to