added commandline option to enforce using TLSv1_client_method() instead of SSLv3_client_method() for compatibility reasons

(based on thieso2's fork of proxytunnel - just optional this time)
This commit is contained in:
Daniel Jonka 2016-02-03 16:26:24 +01:00
parent 1050238587
commit a3a1ffa8b3
3 changed files with 18 additions and 3 deletions

View file

@ -151,7 +151,11 @@ int stream_enable_ssl(PTSTREAM *pts) {
/* Initialise the connection */
SSLeay_add_ssl_algorithms();
meth = SSLv23_client_method();
if (args_info.enforcetls1_flag) {
meth = TLSv1_client_method();
} else {
meth = SSLv23_client_method();
}
SSL_load_error_strings();
ctx = SSL_CTX_new (meth);