cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: SSLv3 fallback attack POODLE

From: moparisthebest <admin_at_moparisthebest.com>
Date: Tue, 04 Nov 2014 09:26:11 -0500

On 11/04/2014 05:42 AM, Daniel Stenberg wrote:
> we should do something about test 2035 which now fails
> when run on any TLS backend without certificate pinning support, like
> PolarSSL...
>

The tests have a 'dependency' type of setup as far as requiring SSL and
such, would it be possible to extend that to depend on certain SSL
backends instead of SSL in general? Otherwise this problem will just
get worse as more types of pinning code is added and only supported in a
few backends.
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2014-11-04