readd updated ssl patch from freebsd

This commit is contained in:
Mario Fetka 2018-03-13 18:35:29 +01:00
parent 4eaa335ea3
commit 11a71728dc

View File

@ -13025,15 +13025,10 @@ bool StartSSLEx(SOCK *sock, X *x, K *priv, bool client_tls, UINT ssl_timeout, ch
{
if (client_tls == false)
{
#ifndef OPENSSL_NO_SSL3
#if OPENSSL_VERSION_NUMBER < 0x10100000L
SSL_CTX_set_ssl_version(ssl_ctx, SSLv3_method());
#else
SSL_CTX_set_ssl_version(ssl_ctx, SSLv23_method());
SSL_CTX_set_options(ssl_ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_TLSv1
#ifdef SSL_OP_NO_TLSv1_2
| SSL_OP_NO_TLSv1_1 | SSL_OP_NO_TLSv1_2
#endif
);
#endif
}
else