From 037ceff0a5378441893a544cc3a8f97804e59b7f Mon Sep 17 00:00:00 2001 From: Jan Vidar Krey Date: Thu, 16 Oct 2014 23:09:50 +0200 Subject: [PATCH] Disable SSLv3 explicitly also. --- src/network/openssl.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/network/openssl.c b/src/network/openssl.c index d79552b..1db60e9 100644 --- a/src/network/openssl.c +++ b/src/network/openssl.c @@ -155,6 +155,11 @@ struct ssl_context_handle* net_ssl_context_create(const char* tls_version, const /* Disable SSLv2 */ SSL_CTX_set_options(ctx->ssl, SSL_OP_NO_SSLv2); +// #ifdef SSL_OP_NO_SSLv3 + /* Disable SSLv3 */ + SSL_CTX_set_options(ctx->ssl, SSL_OP_NO_SSLv3); +// #endif + // FIXME: Why did we need this again? SSL_CTX_set_quiet_shutdown(ctx->ssl, 1);