readd updated ssl patch from freebsd

This commit is contained in:
Mario Fetka 2018-03-13 18:31:59 +01:00
parent 2c2919e3d6
commit 4eaa335ea3

View File

@ -13025,10 +13025,15 @@ bool StartSSLEx(SOCK *sock, X *x, K *priv, bool client_tls, UINT ssl_timeout, ch
{ {
if (client_tls == false) if (client_tls == false)
{ {
#if OPENSSL_VERSION_NUMBER < 0x10100000L #ifndef OPENSSL_NO_SSL3
SSL_CTX_set_ssl_version(ssl_ctx, SSLv3_method()); SSL_CTX_set_ssl_version(ssl_ctx, SSLv3_method());
#else #else
SSL_CTX_set_ssl_version(ssl_ctx, SSLv23_method()); SSL_CTX_set_ssl_version(ssl_ctx, SSLv23_method());
SSL_CTX_set_options(ssl_ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_TLSv1
#ifdef SSL_OP_NO_TLSv1_2
| SSL_OP_NO_TLSv1_1 | SSL_OP_NO_TLSv1_2
#endif
);
#endif #endif
} }
else else