From 75b2a4960b753766ea2eec4dbd34c67733ca8089 Mon Sep 17 00:00:00 2001 From: Richard Moore Date: Mon, 14 Nov 2011 21:56:40 +0000 Subject: Add the ability to do unsafe SSL renegotiation as a fallback. This commit adds the ability to perform legacy SSL renegotiation as a fallback via QSsl::SslOptions. This is something that used to work, but has been disabled by default in newer versions of openssl. The need for this has been reported by users (eg. in QTBUG-14983). Change-Id: I5b80f3ffd07e0c5faddc469f6a8f857bac5740f7 Reviewed-by: Corentin Chary Reviewed-by: Peter Hartmann --- tests/manual/qssloptions/main.cpp | 3 +++ 1 file changed, 3 insertions(+) (limited to 'tests/manual/qssloptions') diff --git a/tests/manual/qssloptions/main.cpp b/tests/manual/qssloptions/main.cpp index 7ee3f9ce0c..21b5dab1d4 100644 --- a/tests/manual/qssloptions/main.cpp +++ b/tests/manual/qssloptions/main.cpp @@ -56,6 +56,7 @@ int main(int argc, char **argv) out << "disable_session_tickets" << endl; out << "disable_compression" << endl; out << "disable_sni" << endl; + out << "enable_unsafe_reneg" << endl; return 1; } @@ -75,6 +76,8 @@ int main(int argc, char **argv) config.setSslOption(QSsl::SslOptionDisableCompression, true); else if (option == QStringLiteral("disable_sni")) config.setSslOption(QSsl::SslOptionDisableServerNameIndication, true); + else if (option == QStringLiteral("enable_unsafe_reneg")) + config.setSslOption(QSsl::SslOptionDisableLegacyRenegotiation, false); } QSslConfiguration::setDefaultConfiguration(config); -- cgit v1.2.3