Disable TLS1.2 support.

2012-11-04 15:54:28 +00:00 · 2012-11-04 15:54:28 +00:00 · c2c2fc959e
parent 0bda2196d8
commit c2c2fc959e
1 changed files with 2 additions and 0 deletions
--- a/content/fetchers/curl.c
+++ b/content/fetchers/curl.c
@ -669,6 +669,8 @@ fetch_curl_sslctxfun(CURL *curl_handle, void *_sslctx, void *parm)
 	SSL_CTX_set_verify(sslctx, SSL_VERIFY_PEER, fetch_curl_verify_callback);
 	SSL_CTX_set_cert_verify_callback(sslctx, fetch_curl_cert_verify_callback,
 					 parm);
+	/* Disable TLS1.2, as it causes some servers to stall. */
+	SSL_CTX_set_options(sslctx, SSL_OP_NO_TLSv1_2);
 	return CURLE_OK;
 }