| commit | 27bf1073abe534644cc1146397082cc78873f516 | [log] [tgz] |
|---|---|---|
| author | Brian Carlstrom <bdc@google.com> | Wed Jul 25 23:11:44 2012 -0700 |
| committer | Brian Carlstrom <bdc@google.com> | Wed Jul 25 23:11:44 2012 -0700 |
| tree | 777cdac1a1a7d6c27a84542f6962e617e1ee3c06 | |
| parent | 175de9376493bb3d4f4ac07dd928716277f09de5 [diff] [blame] |
Use SSL_OP_NO_TLSv1_1 SSL_OP_NO_TLSv1_2 SSL_OP_NO_TICKET for better wpa_supplicant_8 interoperability Bug: https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/969343/comments/72 Bug: http://w1.fi/bugz/show_bug.cgi?id=447#c7 Bug: http://code.google.com/p/android/issues/detail?id=34212 Bug: 6883259 Change-Id: Ib53326cc8cd40e800454b7b92586c052bc910ba8
diff --git a/src/crypto/tls_openssl.c b/src/crypto/tls_openssl.c index aaa920b..be94e8a 100644 --- a/src/crypto/tls_openssl.c +++ b/src/crypto/tls_openssl.c
@@ -929,6 +929,11 @@ #ifdef SSL_OP_NO_COMPRESSION options |= SSL_OP_NO_COMPRESSION; #endif /* SSL_OP_NO_COMPRESSION */ +#ifdef ANDROID + options |= SSL_OP_NO_TLSv1_1; + options |= SSL_OP_NO_TLSv1_2; + options |= SSL_OP_NO_TICKET; +#endif /* ANDROID */ SSL_set_options(conn->ssl, options); conn->ssl_in = BIO_new(BIO_s_mem());