diff options
| author | Rob Stradling <rob@comodo.com> | 2013-09-09 12:52:41 +0100 |
|---|---|---|
| committer | Ben Laurie <ben@links.org> | 2013-09-16 15:07:51 +0100 |
| commit | 4b61f6d2a675fdb57dc93991e7b332a745b44d1f (patch) | |
| tree | 36c5a9fc29cc57f233b9bd40c4a6fd5f9c85cd74 /doc | |
| parent | d5bff72615bfda7ae4e7a9d7200aae60c45032cf (diff) | |
Don't prefer ECDHE-ECDSA ciphers when the client appears to be Safari on OS X.
OS X 10.8..10.8.3 has broken support for ECDHE-ECDSA ciphers.
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/ssl/SSL_CTX_set_options.pod | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/doc/ssl/SSL_CTX_set_options.pod b/doc/ssl/SSL_CTX_set_options.pod index cc588f3a78..fded0601b5 100644 --- a/doc/ssl/SSL_CTX_set_options.pod +++ b/doc/ssl/SSL_CTX_set_options.pod @@ -88,9 +88,10 @@ As of OpenSSL 0.9.8q and 1.0.0c, this option has no effect. ... -=item SSL_OP_MSIE_SSLV2_RSA_PADDING +=item SSL_OP_SAFARI_ECDHE_ECDSA_BUG -As of OpenSSL 0.9.7h and 0.9.8a, this option has no effect. +Don't prefer ECDHE-ECDSA ciphers when the client appears to be Safari on OS X. +OS X 10.8..10.8.3 has broken support for ECDHE-ECDSA ciphers. =item SSL_OP_SSLEAY_080_CLIENT_DH_BUG |