[SECURITY] Use TLS instead of SSL v3 for dropbox connection
authorMarkus Hoelzle <typo3@markus-hoelzle.de>
Tue, 11 Nov 2014 08:48:49 +0000 (09:48 +0100)
committerMarkus Hoelzle <typo3@markus-hoelzle.de>
Tue, 11 Nov 2014 08:48:49 +0000 (09:48 +0100)
Resources/PHP/Dropbox/Curl.php

index ed8a855..261b366 100644 (file)
@@ -33,7 +33,7 @@ final class Curl
         // Force SSL and use our own certificate list.
         $this->set(CURLOPT_SSL_VERIFYPEER, true);   // Enforce certificate validation
         $this->set(CURLOPT_SSL_VERIFYHOST, 2);      // Enforce hostname validation
-        $this->set(CURLOPT_SSLVERSION, 3);          // Enforce SSL v3.
+        $this->set(CURLOPT_SSLVERSION, 1);          // Enforce TLS.
 
         // Limit the set of ciphersuites used.
         global $sslCiphersuiteList;