CircleOfNice / DoctrineRestDriver

GNU General Public License v3.0
153 stars 44 forks source link

Change default value of CURLOPT_SSLVERSION #68

Closed gries closed 6 years ago

gries commented 7 years ago

Hi, according to the official PHP documentation using CURLOPT_SSLVERSION with values of 2 or 3 is discouraged. (http://php.net/manual/en/function.curl-setopt.php)

Note: Your best bet is to not set this and let it use the default. Setting it to 2 or 3 is very dangerous given the known vulnerabilities in SSLv2 and SSLv3.

Fixes # Bad default value

Proposed Changes