diff options
| author | Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com> | 2013-05-10 00:49:06 +0900 |
|---|---|---|
| committer | Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com> | 2013-05-10 00:49:06 +0900 |
| commit | 233501f768e08bd9fff3c90759999b136c315cc2 (patch) | |
| tree | ac9783b82d2c94578e3a7e3097129882d5fa019e /src | |
| parent | fb31e44d60a1134ee278e839994bfb7767063128 (diff) | |
Enable TLS1.1 with gnutls build
Diffstat (limited to 'src')
| -rw-r--r-- | src/LibgnutlsTLSSession.cc | 8 |
1 files changed, 1 insertions, 7 deletions
diff --git a/src/LibgnutlsTLSSession.cc b/src/LibgnutlsTLSSession.cc index d8721aeb..c855750d 100644 --- a/src/LibgnutlsTLSSession.cc +++ b/src/LibgnutlsTLSSession.cc @@ -71,13 +71,7 @@ int GnuTLSSession::init(sock_t sockfd) // It seems err is not error message, but the argument string // which causes syntax error. const char* err; - // For client side, disables TLS1.1 here because there are servers - // that don't understand TLS1.1. TODO Is this still necessary? - rv_ = gnutls_priority_set_direct(sslSession_, - tlsContext_->getSide() == TLS_CLIENT ? - "NORMAL:-VERS-TLS1.1" : - "NORMAL", - &err); + rv_ = gnutls_priority_set_direct(sslSession_, "NORMAL", &err); if(rv_ != GNUTLS_E_SUCCESS) { return TLS_ERR_ERROR; } |
