|
 |
e9d720 |
From f606a25a80a37d5565fed6fc1ce1d8d241dab6c7 Mon Sep 17 00:00:00 2001
|
|
|
e9d720 |
From: Steffen Ullrich <Steffen_Ullrich@genua.de>
|
|
|
e9d720 |
Date: Mon, 14 Oct 2013 14:13:39 +0200
|
|
|
e9d720 |
Subject: [PATCH 1/2] support for handshake protocol TLSv11, TLSv12
|
|
|
e9d720 |
MIME-Version: 1.0
|
|
|
e9d720 |
Content-Type: text/plain; charset=UTF-8
|
|
|
e9d720 |
Content-Transfer-Encoding: 8bit
|
|
|
e9d720 |
|
|
|
e9d720 |
Signed-off-by: Petr Písař <ppisar@redhat.com>
|
|
|
e9d720 |
---
|
|
|
e9d720 |
lib/IO/Socket/SSL.pm | 14 +++++++++-----
|
|
|
e9d720 |
1 file changed, 9 insertions(+), 5 deletions(-)
|
|
|
e9d720 |
|
|
|
e9d720 |
diff --git a/lib/IO/Socket/SSL.pm b/lib/IO/Socket/SSL.pm
|
|
|
e9d720 |
index 3279391..a30ffb1 100644
|
|
|
e9d720 |
--- a/lib/IO/Socket/SSL.pm
|
|
|
e9d720 |
+++ b/lib/IO/Socket/SSL.pm
|
|
|
e9d720 |
@@ -1603,9 +1603,11 @@ sub new {
|
|
|
e9d720 |
}
|
|
|
e9d720 |
|
|
|
e9d720 |
my $ctx_new_sub = UNIVERSAL::can( 'Net::SSLeay',
|
|
|
e9d720 |
- $ver eq 'SSLv2' ? 'CTX_v2_new' :
|
|
|
e9d720 |
- $ver eq 'SSLv3' ? 'CTX_v3_new' :
|
|
|
e9d720 |
- $ver eq 'TLSv1' ? 'CTX_tlsv1_new' :
|
|
|
e9d720 |
+ $ver eq 'SSLv2' ? 'CTX_v2_new' :
|
|
|
e9d720 |
+ $ver eq 'SSLv3' ? 'CTX_v3_new' :
|
|
|
e9d720 |
+ $ver eq 'TLSv1' ? 'CTX_tlsv1_new' :
|
|
|
e9d720 |
+ $ver eq 'TLSv11' ? 'CTX_tlsv1_1_new' :
|
|
|
e9d720 |
+ $ver eq 'TLSv12' ? 'CTX_tlsv1_2_new' :
|
|
|
e9d720 |
'CTX_new'
|
|
|
e9d720 |
) or return IO::Socket::SSL->error("SSL Version $ver not supported");
|
|
|
e9d720 |
my $ctx = $ctx_new_sub->() or return
|
|
|
e9d720 |
@@ -2063,8 +2065,10 @@ See section "SNI Support" for details of SNI the support.
|
|
|
e9d720 |
=item SSL_version
|
|
|
e9d720 |
|
|
|
e9d720 |
Sets the version of the SSL protocol used to transmit data. 'SSLv23' auto-negotiates
|
|
|
e9d720 |
-between SSLv2 and SSLv3, while 'SSLv2', 'SSLv3' or 'TLSv1' restrict the protocol
|
|
|
e9d720 |
-to the specified version. All values are case-insensitive.
|
|
|
e9d720 |
+between SSLv2 and SSLv3, while 'SSLv2', 'SSLv3', 'TLSv1', 'TLSv11' or 'TLSv12'
|
|
|
e9d720 |
+restrict the protocol to the specified version. All values are case-insensitive.
|
|
|
e9d720 |
+Support for 'TLSv11' and 'TLSv12' requires recent versions of Net::SSLeay
|
|
|
e9d720 |
+and openssl.
|
|
|
e9d720 |
|
|
|
e9d720 |
You can limit to set of supported protocols by adding !version separated by ':'.
|
|
|
e9d720 |
|
|
|
e9d720 |
--
|
|
|
e9d720 |
2.7.4
|
|
|
e9d720 |
|