Yeps, we need to provide more options to libcurl and the associated code changes to make sure we can support them. Have you checked what's required for us to do this with OpenSSL?

---
** [bugs:#1280] Can't use curl with TLSv1.2 (OpenSSL)**
**Status:** open-confirmed
**Created:** Tue Sep 17, 2013 10:15 AM UTC by NGG
**Last Updated:** Tue Sep 17, 2013 10:15 AM UTC
**Owner:** Daniel Stenberg
I'd like to use TLSv1.2 with curl, but currently there is no option for that.
If I choose CURL_SSLVERSION_DEFAULT, then it can use TLSv1.2 but it also enables SSLv3, and our client would be vulnerable to version rollback attacks.
If I choose CURL_SSLVERSION_TLSv1, then it can only use TLSv1 but not TLSv1.2.
---
Sent from sourceforge.net because curl-tracker@cool.haxx.se is subscribed to https://sourceforge.net/p/curl/bugs/
To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/curl/admin/bugs/options.  Or, if this is a mailing list, you can unsubscribe from the mailing list.