Disable SSLv3 explicitly also.

This commit is contained in:
Jan Vidar Krey 2014-10-16 23:09:50 +02:00
parent 44708e8433
commit 037ceff0a5
1 changed files with 5 additions and 0 deletions

View File

@ -155,6 +155,11 @@ struct ssl_context_handle* net_ssl_context_create(const char* tls_version, const
/* Disable SSLv2 */ /* Disable SSLv2 */
SSL_CTX_set_options(ctx->ssl, SSL_OP_NO_SSLv2); SSL_CTX_set_options(ctx->ssl, SSL_OP_NO_SSLv2);
// #ifdef SSL_OP_NO_SSLv3
/* Disable SSLv3 */
SSL_CTX_set_options(ctx->ssl, SSL_OP_NO_SSLv3);
// #endif
// FIXME: Why did we need this again? // FIXME: Why did we need this again?
SSL_CTX_set_quiet_shutdown(ctx->ssl, 1); SSL_CTX_set_quiet_shutdown(ctx->ssl, 1);