]>
Commit | Line | Data |
---|---|---|
353e08cd AF |
1 | diff -up openssl-1.0.2g/ssl/ssl_lib.c.v2v3 openssl-1.0.2g/ssl/ssl_lib.c |
2 | --- openssl-1.0.2g/ssl/ssl_lib.c.v2v3 2016-03-01 16:38:26.879142021 +0100 | |
3 | +++ openssl-1.0.2g/ssl/ssl_lib.c 2016-03-01 16:41:32.977353769 +0100 | |
4 | @@ -2055,11 +2055,11 @@ SSL_CTX *SSL_CTX_new(const SSL_METHOD *m | |
5 | ret->options |= SSL_OP_LEGACY_SERVER_CONNECT; | |
6 | ||
7 | /* | |
8 | - * Disable SSLv2 by default, callers that want to enable SSLv2 will have to | |
9 | - * explicitly clear this option via either of SSL_CTX_clear_options() or | |
10 | + * Disable SSLv2 and SSLv3 by default, callers that want to enable these will have to | |
11 | + * explicitly clear these options via either of SSL_CTX_clear_options() or | |
12 | * SSL_clear_options(). | |
13 | */ | |
14 | - ret->options |= SSL_OP_NO_SSLv2; | |
15 | + ret->options |= SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3; | |
16 | ||
17 | return (ret); | |
18 | err: |