diff --git a/Release/src/http/client/http_client_asio.cpp b/Release/src/http/client/http_client_asio.cpp index 3b5b602230..ca45295f40 100644 --- a/Release/src/http/client/http_client_asio.cpp +++ b/Release/src/http/client/http_client_asio.cpp @@ -140,9 +140,11 @@ class asio_connection { std::lock_guard lock(m_socket_lock); assert(!is_ssl()); - boost::asio::ssl::context ssl_context(boost::asio::ssl::context::sslv23); + boost::asio::ssl::context ssl_context(boost::asio::ssl::context::tlsv12); ssl_context.set_default_verify_paths(); - ssl_context.set_options(boost::asio::ssl::context::default_workarounds); + ssl_context.set_options(boost::asio::ssl::context::default_workarounds | + boost::asio::ssl::context::no_sslv2 | + boost::asio::ssl::context::no_sslv3); if (ssl_context_callback) { ssl_context_callback(ssl_context); diff --git a/Release/src/http/client/http_client_winhttp.cpp b/Release/src/http/client/http_client_winhttp.cpp index 06dedd3069..4f25c42e07 100644 --- a/Release/src/http/client/http_client_winhttp.cpp +++ b/Release/src/http/client/http_client_winhttp.cpp @@ -539,7 +539,7 @@ class winhttp_client : public _http_client_communicator #if !defined(CPPREST_TARGET_XP) BOOL win32_result(FALSE); - DWORD secure_protocols(WINHTTP_FLAG_SECURE_PROTOCOL_SSL3 | WINHTTP_FLAG_SECURE_PROTOCOL_TLS1 | WINHTTP_FLAG_SECURE_PROTOCOL_TLS1_1 | WINHTTP_FLAG_SECURE_PROTOCOL_TLS1_2); + DWORD secure_protocols(WINHTTP_FLAG_SECURE_PROTOCOL_SSL3 | WINHTTP_FLAG_SECURE_PROTOCOL_TLS1_2); win32_result = ::WinHttpSetOption(m_hSession, WINHTTP_OPTION_SECURE_PROTOCOLS, &secure_protocols, sizeof(secure_protocols)); if(FALSE == win32_result) { @@ -1561,4 +1561,4 @@ std::shared_ptr<_http_client_communicator> create_winhttp_client(uri&& base_uri, } }}}} - +