coreos/update_engine — pull request #52 by marineam (2014-10-15 21:07:33+00:00)
Title: libcurl_http_fetcher: disable SSLv3 for HTTPS connections.

SSLv3 is broken and should not be used. Ideally we should restrict this
further and only use TLSv1.2 but that may be a problem with some obscure
corporate proxy setups. Possibly implement that later with a
configuration option but for now allow all TLSv1.x versions.