http: allow use of TLS 1.3
Add a tlsv1.3 option to http.sslVersion in addition to the existing tlsv1.[012] options. libcurl has supported this since 7.52.0. This requires OpenSSL 1.1.1 with TLS 1.3 enabled or curl built with recent versions of NSS or BoringSSL as the TLS backend. Signed-off-by: Loganaden Velvindron <logan@hackers.mu> Signed-off-by: Junio C Hamano <gitster@pobox.com>
Loganaden Velvindron committed
Mar 29, 2018 at 14:14 UTC
d81b651f56060038a1547f4beb949122533a8165
2 files changed
+4
Documentation/config.txt
+1
@@ -1948,6 +1948,7 @@ http.sslVersion::
1948
- tlsv1.0
1949
- tlsv1.1
1950
- tlsv1.2
1951
+ - tlsv1.3
1952
1953
+
1954
Can be overridden by the `GIT_SSL_VERSION` environment variable.
http.c
+3
@@ -62,6 +62,9 @@ static struct {
62
{ "tlsv1.1", CURL_SSLVERSION_TLSv1_1 },
63
{ "tlsv1.2", CURL_SSLVERSION_TLSv1_2 },
64
#endif
65
+#if LIBCURL_VERSION_NUM >= 0x073400
66
+ { "tlsv1.3", CURL_SSLVERSION_TLSv1_3 },
67
+#endif
68
};
69
#if LIBCURL_VERSION_NUM >= 0x070903
70
static const char *ssl_key;