[PATCH] secur32/schannel: diabled TLS1.1/1.2 by Default

[Marcus Meissner]

On Mon, Sep 10, 2012 at 12:14:51AM +0900, Hiroshi Miura wrote:
>    -Set TLS1.1/1.2 disabled by Default that is
>     same as Windows 7 default.
> 
>     See registry entry for schannel and control
>     enable/disable tls versions.
> 
>     It also see grbitEnabledProtocols defined in
>     credentials that take precedence over registry.

I think the regression issue with TLS 1.1/1.2 is the "empty fragments"
sending, right?

Perhaps we can just disable that and not all of TLS 1.1/1.2?

Ciao, Marcus