softether-vpn/debian/patches/00-fix-sslv3_method.patch

20 lines
602 B
Diff
Raw Normal View History

2018-03-13 18:43:23 +01:00
--- softether-vpn/src/Mayaqua/Network.c.orig 2018-03-13 18:27:46.572000000 +0100
+++ softether-vpn/src/Mayaqua/Network.c 2018-03-13 18:29:48.596000000 +0100
@@ -13025,10 +13025,15 @@
{
if (client_tls == false)
{
-#if OPENSSL_VERSION_NUMBER < 0x10100000L
+#ifndef OPENSSL_NO_SSL3
SSL_CTX_set_ssl_version(ssl_ctx, SSLv3_method());
#else
SSL_CTX_set_ssl_version(ssl_ctx, SSLv23_method());
+ SSL_CTX_set_options(ssl_ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_TLSv1
+#ifdef SSL_OP_NO_TLSv1_2
+ | SSL_OP_NO_TLSv1_1 | SSL_OP_NO_TLSv1_2
+#endif
+ );
#endif
}
else