Enable TLS1.1 with gnutls build

pull/89/head
Tatsuhiro Tsujikawa 2013-05-10 00:49:06 +09:00
parent fb31e44d60
commit 233501f768
1 changed files with 1 additions and 7 deletions

View File

@ -71,13 +71,7 @@ int GnuTLSSession::init(sock_t sockfd)
// It seems err is not error message, but the argument string
// which causes syntax error.
const char* err;
// For client side, disables TLS1.1 here because there are servers
// that don't understand TLS1.1. TODO Is this still necessary?
rv_ = gnutls_priority_set_direct(sslSession_,
tlsContext_->getSide() == TLS_CLIENT ?
"NORMAL:-VERS-TLS1.1" :
"NORMAL",
&err);
rv_ = gnutls_priority_set_direct(sslSession_, "NORMAL", &err);
if(rv_ != GNUTLS_E_SUCCESS) {
return TLS_ERR_ERROR;
}