CircleOfNice / CiRestClientBundle

Mapper for PHP internal curl library
GNU General Public License v3.0
57 stars 20 forks source link

SSL Version is set to SSLv3 (only) #40

Closed tristankretzer closed 8 years ago

tristankretzer commented 8 years ago

Currently SSL version is set to SSLv3 in CiRestClientBundle/Resources/config/curl_config.yml. According to PHP.net it is not recommended to change the default, especially if you set it to SSLv2 or SSLv3. Due to recent attacks on SSLv2 and SSLv3 many big companies disabled this versions and only allow TLS.

The changed default should either be documented or removed.