GH-31: SSL_CTX_set_options(SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION)

negrutiu · Aug 16, 2024 · 57f787f · 57f787f
1 parent 3cd2593
commit 57f787f
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/nscurl/curl.c b/src/nscurl/curl.c
@@ -1140,6 +1140,10 @@ void CurlTransfer( _In_ PCURL_REQUEST pReq )
 				curl_easy_setopt( curl, CURLOPT_SSL_VERIFYHOST, FALSE );
 			}
 
+			// GH-31: allow "unsafe legacy renegotiation"
+			// Symptomatic URL: https://publicinfobanjir.water.gov.my/hujan/data-hujan/?state=PLS&lang=en
+			pReq->opensslSetFlags |= SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION;
+
 			// SSL callback
 			curl_easy_setopt(curl, CURLOPT_SSL_CTX_FUNCTION, CurlSSLCallback);
 			curl_easy_setopt(curl, CURLOPT_SSL_CTX_DATA, pReq);