diff options
| author | Richard Moore <rich@kde.org> | 2011-11-14 21:56:40 +0000 |
|---|---|---|
| committer | Qt by Nokia <qt-info@nokia.com> | 2011-11-15 11:53:44 +0100 |
| commit | 75b2a4960b753766ea2eec4dbd34c67733ca8089 (patch) | |
| tree | aca83ece26b82b33a2d735c4cb70f273550cf0a1 /src/network/ssl/qsslconfiguration_p.h | |
| parent | e1ca68077a99c5f8dc4a1c8a337b738a5bf6d5dc (diff) | |
Add the ability to do unsafe SSL renegotiation as a fallback.
This commit adds the ability to perform legacy SSL renegotiation as
a fallback via QSsl::SslOptions. This is something that used to work,
but has been disabled by default in newer versions of openssl. The
need for this has been reported by users (eg. in QTBUG-14983).
Change-Id: I5b80f3ffd07e0c5faddc469f6a8f857bac5740f7
Reviewed-by: Corentin Chary <corentin.chary@gmail.com>
Reviewed-by: Peter Hartmann <peter.hartmann@nokia.com>
Diffstat (limited to 'src/network/ssl/qsslconfiguration_p.h')
| -rw-r--r-- | src/network/ssl/qsslconfiguration_p.h | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/network/ssl/qsslconfiguration_p.h b/src/network/ssl/qsslconfiguration_p.h index b83edb9eb8..a711eeb27f 100644 --- a/src/network/ssl/qsslconfiguration_p.h +++ b/src/network/ssl/qsslconfiguration_p.h @@ -82,7 +82,8 @@ public: QSslConfigurationPrivate() : protocol(QSsl::SecureProtocols), peerVerifyMode(QSslSocket::AutoVerifyPeer), - peerVerifyDepth(0) + peerVerifyDepth(0), + sslOptions(QSsl::SslOptionDisableEmptyFragments|QSsl::SslOptionDisableLegacyRenegotiation) { } QSslCertificate peerCertificate; |