Merge pull request square#1196 from nfuller/SwitchOffSslv3

Change COMPATIBLE_TLS to be TLSv1.0 and not SSLv3
nfuller · Dec 10, 2014 · 09637b6 · 09637b6
2 parents 84305e6 + a21a3d3
commit 09637b6
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/okhttp/src/main/java/com/squareup/okhttp/ConnectionSpec.java b/okhttp/src/main/java/com/squareup/okhttp/ConnectionSpec.java
@@ -53,13 +53,13 @@ public final class ConnectionSpec {
           CipherSuite.TLS_RSA_WITH_RC4_128_SHA,
           CipherSuite.TLS_RSA_WITH_RC4_128_MD5
       )
-      .tlsVersions(TlsVersion.TLS_1_2, TlsVersion.TLS_1_1, TlsVersion.TLS_1_0, TlsVersion.SSL_3_0)
+      .tlsVersions(TlsVersion.TLS_1_2, TlsVersion.TLS_1_1, TlsVersion.TLS_1_0)
       .supportsTlsExtensions(true)
       .build();
 
   /** A backwards-compatible fallback connection for interop with obsolete servers. */
   public static final ConnectionSpec COMPATIBLE_TLS = new Builder(MODERN_TLS)
-      .tlsVersions(TlsVersion.SSL_3_0)
+      .tlsVersions(TlsVersion.TLS_1_0)
       .build();
 
   /** Unencrypted, unauthenticated connections for {@code http:} URLs. */