diff --git a/libratbox/src/openssl.c b/libratbox/src/openssl.c index 1ffbae8c9..133e4ecb5 100644 --- a/libratbox/src/openssl.c +++ b/libratbox/src/openssl.c @@ -370,7 +370,7 @@ rb_init_ssl(void) #endif #ifndef LRB_HAVE_TLS_METHOD_API - ssl_client_ctx = SSL_CTX_new(TLSv1_client_method()); + ssl_client_ctx = SSL_CTX_new(SSLv23_client_method()); #else ssl_client_ctx = SSL_CTX_new(TLS_client_method()); #endif @@ -382,6 +382,10 @@ rb_init_ssl(void) ret = 0; } +#ifndef LRB_HAVE_TLS_METHOD_API + SSL_CTX_set_options(ssl_client_ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3); +#endif + #ifdef SSL_OP_NO_TICKET SSL_CTX_set_options(ssl_client_ctx, SSL_OP_NO_TICKET); #endif