You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
29 lines
1.4 KiB
29 lines
1.4 KiB
6 years ago
|
From 72643b2b83990b9cf97cc84b285b30763d44a72d Mon Sep 17 00:00:00 2001
|
||
|
|
From: "Jay Freeman (saurik)" <saurik@saurik.com>
|
||
|
|
Date: Tue, 2 Aug 2016 03:08:04 -0700
|
||
|
|
Subject: [PATCH] idevice: Update GnuTLS code to support iOS 10
|
||
|
|
|
||
|
|
As of iOS 10 beta 4, the GnuTLS implementation idevice_connection_enable_ssl
|
||
|
|
needs to be updated to support TLS. Using +VERS-TLS-ALL did not work on some
|
||
|
|
of the devices I tested and I wasn't sure how to fix it, but +VERS-TLS1.0 is
|
||
|
|
working on every device I've tested: iOS 9.0.2, 10.0b4, 8.1.1, 6.0, and 3.0.
|
||
|
|
---
|
||
|
|
src/idevice.c | 2 +-
|
||
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
||
|
|
|
||
|
|
diff --git a/src/idevice.c b/src/idevice.c
|
||
|
|
index 1dcdae2..b6dfe4e 100644
|
||
|
|
--- a/src/idevice.c
|
||
|
|
+++ b/src/idevice.c
|
||
|
|
@@ -774,7 +774,7 @@ LIBIMOBILEDEVICE_API idevice_error_t idevice_connection_enable_ssl(idevice_conne
|
||
|
|
gnutls_certificate_client_set_retrieve_function(ssl_data_loc->certificate, internal_cert_callback);
|
||
|
|
#endif
|
||
|
|
gnutls_init(&ssl_data_loc->session, GNUTLS_CLIENT);
|
||
|
|
- gnutls_priority_set_direct(ssl_data_loc->session, "NONE:+VERS-SSL3.0:+ANON-DH:+RSA:+AES-128-CBC:+AES-256-CBC:+SHA1:+MD5:+COMP-NULL", NULL);
|
||
|
|
+ gnutls_priority_set_direct(ssl_data_loc->session, "NONE:+VERS-TLS1.0:+ANON-DH:+RSA:+AES-128-CBC:+AES-256-CBC:+SHA1:+MD5:+COMP-NULL", NULL);
|
||
|
|
gnutls_credentials_set(ssl_data_loc->session, GNUTLS_CRD_CERTIFICATE, ssl_data_loc->certificate);
|
||
|
|
gnutls_session_set_ptr(ssl_data_loc->session, ssl_data_loc);
|
||
|
|
|
||
|
|
--
|
||
|
|
2.9.3
|