readd updated ssl patch from freebsd

This commit is contained in:
Mario Fetka 2018-03-13 18:31:59 +01:00
parent 2c2919e3d6
commit 4eaa335ea3

View File

@ -13025,10 +13025,15 @@ bool StartSSLEx(SOCK *sock, X *x, K *priv, bool client_tls, UINT ssl_timeout, ch
{
if (client_tls == false)
{
#if OPENSSL_VERSION_NUMBER < 0x10100000L
#ifndef OPENSSL_NO_SSL3
SSL_CTX_set_ssl_version(ssl_ctx, SSLv3_method());
#else
SSL_CTX_set_ssl_version(ssl_ctx, SSLv23_method());
SSL_CTX_set_options(ssl_ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_TLSv1
#ifdef SSL_OP_NO_TLSv1_2
| SSL_OP_NO_TLSv1_1 | SSL_OP_NO_TLSv1_2
#endif
);
#endif
}
else