From 8cee03b118850bc5d6cd9f1269f91af14e5f724f Mon Sep 17 00:00:00 2001
From: danicampora <daniel@wipy.io>
Date: Fri, 6 Nov 2015 00:07:59 +0100
Subject: [PATCH] cc3200: Force SSL method to be TLSV1.
The default setting of using the "highest" method available doesn't
work with some servers like Microsoft Azure. TLSV1 seems to work with
pretty much any server.
---
cc3200/mods/modussl.c | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/cc3200/mods/modussl.c b/cc3200/mods/modussl.c
index 4239c444b..410588dd2 100644
--- a/cc3200/mods/modussl.c
+++ b/cc3200/mods/modussl.c
@@ -103,6 +103,10 @@ STATIC mp_obj_t mod_ssl_wrap_socket(mp_uint_t n_args, const mp_obj_t *pos_args,
_i16 sd = ((mod_network_socket_obj_t *)args[0].u_obj)->sock_base.sd;
_i16 _errno;
+ _u8 method = SL_SO_SEC_METHOD_TLSV1;
+ if ((_errno = sl_SetSockOpt(sd, SL_SOL_SOCKET, SL_SO_SECMETHOD, &method, sizeof(method))) < 0) {
+ goto socket_error;
+ }
if (keyfile && (_errno = sl_SetSockOpt(sd, SL_SOL_SOCKET, SL_SO_SECURE_FILES_PRIVATE_KEY_FILE_NAME, keyfile, strlen(keyfile))) < 0) {
goto socket_error;
}
--
GitLab