wininet: TLS fallback mechanism (try 3)

Hiroshi Miura miurahr at linux.com
Wed Oct 31 16:51:56 CDT 2012


OpenSSL 1.0.x now support TLSv1.1 and TLSv1.2.
Sometimes TLSv1.1/1.2 negotiation fails because of combination
of server/client ssl library versions.
It fixes the error when connecting Evernote server from Evernote client.
Wininet tries connecting by TLSv1 after it once fails with TLSv1.1/1.2.
http://bugs.winehq.org/show_bug.cgi?id=30598

It has a mechanism enable/disable TLSv1.1/1.2 by registry entry under
SYSTEM/CurrentControlSet/Control/SecurityProvider/SCHANNEL/Protocols/
where is as same place as Windows7.
TLSv1.1/1.2 is enabled when the registry entry does not exist.

These fixes are not enabled when openssl don't support TLSv1.1/1.2,
and wininet behave same as before.

Signed-off-by: Hiroshi Miura <miurahr at linux.com>
---
 dlls/wininet/netconnection.c |  166 ++++++++++++++++++++++++++++++++----------
 1 file changed, 127 insertions(+), 39 deletions(-)




-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-wininet-TLS-fallback-mechanism.txt
Type: text/x-patch
Size: 8512 bytes
Desc: not available
URL: <http://www.winehq.org/pipermail/wine-patches/attachments/20121101/14946cd5/attachment.bin>


More information about the wine-patches mailing list