0
0
Fork 0
mirror of https://github.com/matrix-construct/construct synced 2024-11-30 02:32:43 +01:00

Merge pull request #73 from Argure/master

Explicitly drop SSLv3 connections (SSL_OP_NO_SSLv3) - might break TLS-ca...
This commit is contained in:
William Pitcock 2014-11-05 04:52:50 -06:00
commit 5d4a99540b

View file

@ -312,7 +312,7 @@ rb_init_ssl(void)
ret = 0; ret = 0;
} }
/* Disable SSLv2, make the client use our settings */ /* Disable SSLv2, make the client use our settings */
SSL_CTX_set_options(ssl_server_ctx, SSL_OP_NO_SSLv2 | SSL_OP_CIPHER_SERVER_PREFERENCE SSL_CTX_set_options(ssl_server_ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 | SSL_OP_CIPHER_SERVER_PREFERENCE
#ifdef SSL_OP_SINGLE_DH_USE #ifdef SSL_OP_SINGLE_DH_USE
| SSL_OP_SINGLE_DH_USE | SSL_OP_SINGLE_DH_USE
#endif #endif