From: Daniel Stenberg Date: Mon, 13 Oct 2025 07:24:57 +0000 (+0200) Subject: socks_sspi: remove the enforced mode clearing X-Git-Tag: rc-8_17_0-2~96 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e003c0b25934bd8875ce34df2e4141fe518356ae;p=thirdparty%2Fcurl.git socks_sspi: remove the enforced mode clearing Reported-by: Joshua Rogers Closes #19040 --- diff --git a/lib/socks_sspi.c b/lib/socks_sspi.c index 69b0004219..54049e8c99 100644 --- a/lib/socks_sspi.c +++ b/lib/socks_sspi.c @@ -325,8 +325,7 @@ CURLcode Curl_SOCKS5_gssapi_negotiate(struct Curl_cfilter *cf, infof(data, "SOCKS5 server supports GSS-API %s data protection.", (gss_enc == 0) ? "no" : ((gss_enc == 1) ? "integrity":"confidentiality") ); - /* force to no data protection, avoid encryption/decryption for now */ - gss_enc = 0; + /* * Sending the encryption type in clear seems wrong. It should be * protected with gss_seal()/gss_wrap(). See RFC1961 extract below