Skip to content
This repository was archived by the owner on Jun 14, 2024. It is now read-only.

Disable TLS 1.0 and 1.1 use in cpprest #20

Merged
Amit Saraf (amitsara) merged 7 commits into from
Dec 20, 2019
Merged

Disable TLS 1.0 and 1.1 use in cpprest #20

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
c90e927
Disable TLS version 1.0 & 1.1.
amitsara Dec 19, 2019
c2f1f7c
fix linux compilation
amitsara Dec 19, 2019
4a65f7e
use tls 1.1
amitsara Dec 19, 2019
df2e436
use tls 1.2
amitsara Dec 19, 2019
e5b01f5
code clean up
amitsara Dec 20, 2019
9525053
code clean up
amitsara Dec 20, 2019
ebf448a
code clean up
amitsara Dec 20, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 4 additions & 2 deletions Release/src/http/client/http_client_asio.cpp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -140,9 +140,11 @@ class asio_connection
{
std::lock_guard<std::mutex> lock(m_socket_lock);
assert(!is_ssl());
boost::asio::ssl::context ssl_context(boost::asio::ssl::context::sslv23);
boost::asio::ssl::context ssl_context(boost::asio::ssl::context::tlsv12);
ssl_context.set_default_verify_paths();
ssl_context.set_options(boost::asio::ssl::context::default_workarounds);
ssl_context.set_options(boost::asio::ssl::context::default_workarounds |
boost::asio::ssl::context::no_sslv2 |
boost::asio::ssl::context::no_sslv3);
if (ssl_context_callback)
{
ssl_context_callback(ssl_context);
Expand Down
4 changes: 2 additions & 2 deletions Release/src/http/client/http_client_winhttp.cpp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -539,7 +539,7 @@ class winhttp_client : public _http_client_communicator
#if !defined(CPPREST_TARGET_XP)
BOOL win32_result(FALSE);

DWORD secure_protocols(WINHTTP_FLAG_SECURE_PROTOCOL_SSL3 | WINHTTP_FLAG_SECURE_PROTOCOL_TLS1 | WINHTTP_FLAG_SECURE_PROTOCOL_TLS1_1 | WINHTTP_FLAG_SECURE_PROTOCOL_TLS1_2);
DWORD secure_protocols(WINHTTP_FLAG_SECURE_PROTOCOL_SSL3 | WINHTTP_FLAG_SECURE_PROTOCOL_TLS1_2);
win32_result = ::WinHttpSetOption(m_hSession, WINHTTP_OPTION_SECURE_PROTOCOLS, &secure_protocols, sizeof(secure_protocols));
if(FALSE == win32_result)
{
Expand Down Expand Up @@ -1561,4 +1561,4 @@ std::shared_ptr<_http_client_communicator> create_winhttp_client(uri&& base_uri,
}

}}}}