src/patches/openssl-1.0.2g-disable-sslv2v3.patch

   1 diff -up openssl-1.0.2g/ssl/ssl_lib.c.v2v3 openssl-1.0.2g/ssl/ssl_lib.c
   2 --- openssl-1.0.2g/ssl/ssl_lib.c.v2v3   2016-03-01 16:38:26.879142021 +0100
   3 +++ openssl-1.0.2g/ssl/ssl_lib.c        2016-03-01 16:41:32.977353769 +0100
   4 @@ -2055,11 +2055,11 @@ SSL_CTX *SSL_CTX_new(const SSL_METHOD *m
   5      ret->options |= SSL_OP_LEGACY_SERVER_CONNECT;
   6
   7      /*
   8 -     * Disable SSLv2 by default, callers that want to enable SSLv2 will have to
   9 -     * explicitly clear this option via either of SSL_CTX_clear_options() or
  10 +     * Disable SSLv2 and SSLv3 by default, callers that want to enable these will have to
  11 +     * explicitly clear these options via either of SSL_CTX_clear_options() or
  12       * SSL_clear_options().
  13       */
  14 -    ret->options |= SSL_OP_NO_SSLv2;
  15 +    ret->options |= SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3;
  16
  17      return (ret);
  18   err: