diff options
| author |  Nikias Bassen | 2019-08-18 01:57:44 +0200 |
|---|---|---|
| committer | Nikias Bassen | 2019-08-18 01:57:44 +0200 |
| commit | a9ccd31ddd5d59db8dc5114c7c85e3eac8743578 (patch) | |
| tree | 2ec96e4dda0840c64f5cbde61a9867848d23ab43 /src | |
| parent | 98ac7da5255a69fa4620e325228a1c7d79ba42d7 (diff) | |
| download | libimobiledevice-a9ccd31ddd5d59db8dc5114c7c85e3eac8743578.tar.gz libimobiledevice-a9ccd31ddd5d59db8dc5114c7c85e3eac8743578.tar.bz2 | |
Force use of TLSv1 for backwards compatibility with older iOS versions
Diffstat (limited to 'src')
| -rw-r--r-- | src/idevice.c | 14 |
1 files changed, 13 insertions, 1 deletions
diff --git a/src/idevice.c b/src/idevice.c index 794af8b..38fc015 100644 --- a/src/idevice.c +++ b/src/idevice.c @@ -789,6 +789,18 @@ LIBIMOBILEDEVICE_API idevice_error_t idevice_connection_enable_ssl(idevice_conne return ret; } + /* force use of TLSv1 */ +#ifdef SSL_OP_NO_TLSv1_1 + int opts = SSL_OP_NO_TLSv1_1; +#ifdef SSL_OP_NO_TLSv1_2 + opts |= SSL_OP_NO_TLSv1_2; +#endif +#ifdef SSL_OP_NO_TLSv1_3 + opts |= SSL_OP_NO_TLSv1_3; +#endif + SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL | opts); +#endif + BIO* membp; X509* rootCert = NULL; membp = BIO_new_mem_buf(root_cert.data, root_cert.size); @@ -832,7 +844,7 @@ LIBIMOBILEDEVICE_API idevice_error_t idevice_connection_enable_ssl(idevice_conne ssl_data_loc->ctx = ssl_ctx; connection->ssl_data = ssl_data_loc; ret = IDEVICE_E_SUCCESS; - debug_info("SSL mode enabled, cipher: %s", SSL_get_cipher(ssl)); + debug_info("SSL mode enabled, %s, cipher: %s", SSL_get_version(ssl), SSL_get_cipher(ssl)); } /* required for proper multi-thread clean up to prevent leaks */ openssl_remove_thread_state(); |