mirror of
https://github.com/curl/curl.git
synced 2024-12-03 06:20:31 +08:00
27cb384679
As per BoringSSL porting documentation [1], BoringSSL rejects peer renegotiations by default. curl fails when trying to authenticate to server through client certificate if it is requested by server after the initial TLS handshake. Enable renegotiation by default with BoringSSL to get same behavior as with OpenSSL. This is done by calling SSL_set_renegotiate_mode [2] which was introduced in commit 1d5ef3bb1eb9 [3]. 1 - https://boringssl.googlesource.com/boringssl/+/HEAD/PORTING.md#tls-renegotiation 2 - https://boringssl.googlesource.com/boringssl/+/master/include/openssl/ssl.h#3482 3 - https://boringssl.googlesource.com/boringssl/+/1d5ef3bb1eb97848617db5e7d633d735a401df86 Signed-off-by: Jérémy Rocher <rocher.jeremy@gmail.com> Fixes #3258 Closes #3259 |
||
|---|---|---|
| .. | ||
| cyassl.c | ||
| cyassl.h | ||
| darwinssl.c | ||
| darwinssl.h | ||
| gskit.c | ||
| gskit.h | ||
| gtls.c | ||
| gtls.h | ||
| mbedtls.c | ||
| mbedtls.h | ||
| mesalink.c | ||
| mesalink.h | ||
| nss.c | ||
| nssg.h | ||
| openssl.c | ||
| openssl.h | ||
| polarssl_threadlock.c | ||
| polarssl_threadlock.h | ||
| polarssl.c | ||
| polarssl.h | ||
| schannel_verify.c | ||
| schannel.c | ||
| schannel.h | ||
| vtls.c | ||
| vtls.h | ||