[ipfire-2.x.git] / src / patches / openssl-disable-sslv2-sslv3.patch

--- openssl-1.0.1m/ssl/ssl_lib.c.old	2015-03-19 15:56:40.966287977 +0100
+++ openssl-1.0.1m/ssl/ssl_lib.c	2015-03-19 15:57:07.976160846 +0100
@@ -1892,6 +1892,9 @@
      */
     ret->options |= SSL_OP_LEGACY_SERVER_CONNECT;
 
+    /* Disable SSLv2 and SSLv3 by default (affects the SSLv23_method() only) */
+    ret->options |= SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3;
+
     return (ret);
  err:
     SSLerr(SSL_F_SSL_CTX_NEW, ERR_R_MALLOC_FAILURE);
Commit	Line	Data
506e4b96 MT	1	--- openssl-1.0.1m/ssl/ssl_lib.c.old 2015-03-19 15:56:40.966287977 +0100
	2	+++ openssl-1.0.1m/ssl/ssl_lib.c 2015-03-19 15:57:07.976160846 +0100
	3	@@ -1892,6 +1892,9 @@
	4	*/
	5	ret->options \|= SSL_OP_LEGACY_SERVER_CONNECT;
	6
	7	+ /* Disable SSLv2 and SSLv3 by default (affects the SSLv23_method() only) */
	8	+ ret->options \|= SSL_OP_NO_SSLv2 \| SSL_OP_NO_SSLv3;
	9	+
	10	return (ret);
	11	err:
	12	SSLerr(SSL_F_SSL_CTX_NEW, ERR_R_MALLOC_FAILURE);