[curl/curl] 67d3af: schannel: Support strong crypto option

"Morten M. Neergaard" <[email protected]> Thu, 22 Apr 2021 14:44:47 -0700

Newsgroups	gmane.comp.web.curl.cvs
Message-ID	<curl/curl/push/refs/heads/master/[email protected]>

  Branch: refs/heads/master
  Home:   https://github.com/curl/curl
  Commit: 67d3afa73f4cdb8a6c473f911c8af800121e0a49
      https://github.com/curl/curl/commit/67d3afa73f4cdb8a6c473f911c8af800121e0a49
  Author: Morten Minde Neergaard <[email protected]>
  Date:   2021-04-22 (Thu, 22 Apr 2021)

  Changed paths:
    M docs/CIPHERS.md
    M lib/vtls/schannel.c

  Log Message:
  -----------
  schannel: Support strong crypto option

- Support enabling strong crypto via optional user cipher list when
  USE_STRONG_CRYPTO or SCH_USE_STRONG_CRYPTO is in the list.

MSDN says SCH_USE_STRONG_CRYPTO "Instructs Schannel to disable known
weak cryptographic algorithms, cipher suites, and SSL/TLS protocol
versions that may be otherwise enabled for better interoperability."

Ref: https://curl.se/mail/lib-2021-02/0066.html
Ref: https://curl.se/docs/manpage.html#--ciphers
Ref: https://curl.se/libcurl/c/CURLOPT_SSL_CIPHER_LIST.html
Ref: https://docs.microsoft.com/en-us/windows/win32/api/schannel/ns-schannel-schannel_cred

Closes https://github.com/curl/curl/pull/6734


_______________________________________________
curl-commits mailing list
[email protected]
https://cool.haxx.se/cgi-bin/mailman/listinfo/curl-commits