| commit | d7f4c3772e72ffc909a2823cec0766757eaf1245 | [log] [tgz] |
|---|---|---|
| author | Nick Zitzmann <nickzman@gmail.com> | Mon Apr 08 17:07:20 2013 -0600 |
| committer | Nick Zitzmann <nickzman@gmail.com> | Mon Apr 08 17:07:20 2013 -0600 |
| tree | 658194beebcca71241dc9be96d09fa94edb4c7ad | |
| parent | 29fdb2700f7979e71b8828c18e0e157a44b6db53 [diff] |
darwinssl: disable insecure ciphers by default I noticed that aria2's SecureTransport code disables insecure ciphers such as NULL, anonymous, IDEA, and weak-key ciphers used by SSLv3 and later. That's a good idea, and now we do the same thing in order to prevent curl from accessing a "secure" site that only negotiates insecure ciphersuites.