aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorBrian Carlstrom <bdc@google.com>2012-07-25 23:17:29 -0700
committerBrian Carlstrom <bdc@google.com>2012-07-26 15:43:30 -0700
commit0909bece42c42eac7a494b4bbe94bac2114d3acb (patch)
treeecc3e2d0015a86a51d787044defb13b885d21965
parent4f0c8cbfd0547e3163aa6fc6403d8def63e227a2 (diff)
downloadwpa_supplicant_6-0909bece42c42eac7a494b4bbe94bac2114d3acb.tar.gz
Use SSL_OP_NO_TLSv1_1 SSL_OP_NO_TLSv1_2 SSL_OP_NO_TICKET for better wpa_supplicant_6 interoperability
Bug: https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/969343/comments/72 Bug: http://w1.fi/bugz/show_bug.cgi?id=447#c7 Bug: http://code.google.com/p/android/issues/detail?id=34212 Bug: 6883259 (cherry-picked from 617450fed233b4b17a8a7c7b9f60ecabc513df21) Change-Id: I14c83f51da98c9340ec0c8429d16ae5c06a0d2c1
-rw-r--r--wpa_supplicant/src/crypto/tls_openssl.c5
1 files changed, 5 insertions, 0 deletions
diff --git a/wpa_supplicant/src/crypto/tls_openssl.c b/wpa_supplicant/src/crypto/tls_openssl.c
index 3d468ec..70fe79c 100644
--- a/wpa_supplicant/src/crypto/tls_openssl.c
+++ b/wpa_supplicant/src/crypto/tls_openssl.c
@@ -887,6 +887,11 @@ struct tls_connection * tls_connection_init(void *ssl_ctx)
#ifdef SSL_OP_NO_COMPRESSION
options |= SSL_OP_NO_COMPRESSION;
#endif /* SSL_OP_NO_COMPRESSION */
+#ifdef ANDROID
+ options |= SSL_OP_NO_TLSv1_1;
+ options |= SSL_OP_NO_TLSv1_2;
+ options |= SSL_OP_NO_TICKET;
+#endif /* ANDROID */
SSL_set_options(conn->ssl, options);
conn->ssl_in = BIO_new(BIO_s_mem());