openssl: Disable SSLv3 and SSLv2 by default

[ipfire-2.x.git] / src / patches / openssl-disable-sslv2-sslv3.patch

diff -up openssl-1.0.1h/ssl/ssl_lib.c.v2v3 openssl-1.0.1h/ssl/ssl_lib.c\r
--- openssl-1.0.1h/ssl/ssl_lib.c.v2v3	2014-06-11 16:02:52.000000000 +0200\r
+++ openssl-1.0.1h/ssl/ssl_lib.c	2014-06-30 14:18:04.290248080 +0200\r
@@ -1875,6 +1875,9 @@ SSL_CTX *SSL_CTX_new(const SSL_METHOD *m\r
 	 */\r
 	ret->options |= SSL_OP_LEGACY_SERVER_CONNECT;\r
 \r
+	/* Disable SSLv2 and SSLv3 by default (affects the SSLv23_method() only) */\r
+	ret->options |= SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3;\r
+\r
 	return(ret);\r
 err:\r
 	SSLerr(SSL_F_SSL_CTX_NEW,ERR_R_MALLOC_FAILURE);\r