1*6236dae4SAndroid Build Coastguard Worker--- 2*6236dae4SAndroid Build Coastguard Workerc: Copyright (C) Daniel Stenberg, <[email protected]>, et al. 3*6236dae4SAndroid Build Coastguard WorkerSPDX-License-Identifier: curl 4*6236dae4SAndroid Build Coastguard WorkerLong: proxy-ssl-allow-beast 5*6236dae4SAndroid Build Coastguard WorkerHelp: Allow this security flaw for HTTPS proxy 6*6236dae4SAndroid Build Coastguard WorkerAdded: 7.52.0 7*6236dae4SAndroid Build Coastguard WorkerCategory: proxy tls 8*6236dae4SAndroid Build Coastguard WorkerMulti: boolean 9*6236dae4SAndroid Build Coastguard WorkerSee-also: 10*6236dae4SAndroid Build Coastguard Worker - ssl-allow-beast 11*6236dae4SAndroid Build Coastguard Worker - proxy 12*6236dae4SAndroid Build Coastguard WorkerExample: 13*6236dae4SAndroid Build Coastguard Worker - --proxy-ssl-allow-beast -x https://proxy $URL 14*6236dae4SAndroid Build Coastguard Worker--- 15*6236dae4SAndroid Build Coastguard Worker 16*6236dae4SAndroid Build Coastguard Worker# `--proxy-ssl-allow-beast` 17*6236dae4SAndroid Build Coastguard Worker 18*6236dae4SAndroid Build Coastguard WorkerDo not work around a security flaw in the TLS1.0 protocol known as BEAST when 19*6236dae4SAndroid Build Coastguard Workercommunicating to an HTTPS proxy. If this option is not used, the TLS layer may 20*6236dae4SAndroid Build Coastguard Workeruse workarounds known to cause interoperability problems with some older 21*6236dae4SAndroid Build Coastguard Workerserver implementations. 22*6236dae4SAndroid Build Coastguard Worker 23*6236dae4SAndroid Build Coastguard WorkerThis option only changes how curl does TLS 1.0 with an HTTPS proxy and has no 24*6236dae4SAndroid Build Coastguard Workereffect on later TLS versions. 25*6236dae4SAndroid Build Coastguard Worker 26*6236dae4SAndroid Build Coastguard Worker**WARNING**: this option loosens the TLS security, and by using this flag you 27*6236dae4SAndroid Build Coastguard Workerask for exactly that. 28*6236dae4SAndroid Build Coastguard Worker 29*6236dae4SAndroid Build Coastguard WorkerEquivalent to --ssl-allow-beast but used in HTTPS proxy context. 30