Skip to content

Commit

Permalink
Change COMPATIBLE_TLS to be TLSv1.0 and not SSLv3
Browse files Browse the repository at this point in the history
Based on a discussion with Jesse Wilson during
square#1189.
  • Loading branch information
nfuller committed Dec 10, 2014
1 parent 5b69615 commit a21a3d3
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions okhttp/src/main/java/com/squareup/okhttp/ConnectionSpec.java
Original file line number Diff line number Diff line change
Expand Up @@ -53,13 +53,13 @@ public final class ConnectionSpec {
CipherSuite.TLS_RSA_WITH_RC4_128_SHA,
CipherSuite.TLS_RSA_WITH_RC4_128_MD5
)
.tlsVersions(TlsVersion.TLS_1_2, TlsVersion.TLS_1_1, TlsVersion.TLS_1_0, TlsVersion.SSL_3_0)
.tlsVersions(TlsVersion.TLS_1_2, TlsVersion.TLS_1_1, TlsVersion.TLS_1_0)
.supportsTlsExtensions(true)
.build();

/** A backwards-compatible fallback connection for interop with obsolete servers. */
public static final ConnectionSpec COMPATIBLE_TLS = new Builder(MODERN_TLS)
.tlsVersions(TlsVersion.SSL_3_0)
.tlsVersions(TlsVersion.TLS_1_0)
.build();

/** Unencrypted, unauthenticated connections for {@code http:} URLs. */
Expand Down

0 comments on commit a21a3d3

Please sign in to comment.