tls: remove Curl_ssl false_start

The secure transport vTLS backend was the only Curl_ssl struct instance
that populated the false_start field. Since its removed, we can now
remove that field entirely. This was a protocol feature specific to TLS
1.2 that has been replaced by the more widely adopted TLS 1.3 early data
mechanisms.

--false-start is now deprecated

Closes #17595
This commit is contained in:
Daniel McCarney 2025-06-11 08:59:11 -04:00 committed by Daniel Stenberg
parent 220c5d8f49
commit 1e2e808def
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
15 changed files with 3 additions and 34 deletions

View file

@ -361,9 +361,6 @@ static CURLcode ssl_setopts(struct GlobalConfig *global,
if(config->doh_verifystatus)
my_setopt_long(curl, CURLOPT_DOH_SSL_VERIFYSTATUS, 1);
if(config->falsestart)
my_setopt_long(curl, CURLOPT_SSL_FALSESTART, 1);
my_setopt_SSLVERSION(curl, CURLOPT_SSLVERSION,
config->ssl_version | config->ssl_version_max);
if(config->proxy)

View file

@ -330,7 +330,6 @@ struct OperationConfig {
BIT(proxy_ssl_auto_client_cert); /* proxy version of ssl_auto_client_cert */
BIT(noalpn); /* enable/disable TLS ALPN extension */
BIT(abstract_unix_socket); /* path to an abstract Unix domain socket */
BIT(falsestart);
BIT(path_as_is);
BIT(suppress_connect_headers); /* suppress proxy CONNECT response headers
from user callbacks */

View file

@ -1999,7 +1999,7 @@ static ParameterError opt_bool(struct GlobalConfig *global,
config->doh_verifystatus = toggle;
break;
case C_FALSE_START: /* --false-start */
config->falsestart = toggle;
opt_depr(global, a);
break;
case C_SSL_NO_REVOKE: /* --ssl-no-revoke */
config->ssl_no_revoke = toggle;