readd updated ssl patch from freebsd
This commit is contained in:
parent
2c2919e3d6
commit
4eaa335ea3
@ -13025,10 +13025,15 @@ bool StartSSLEx(SOCK *sock, X *x, K *priv, bool client_tls, UINT ssl_timeout, ch
|
|||||||
{
|
{
|
||||||
if (client_tls == false)
|
if (client_tls == false)
|
||||||
{
|
{
|
||||||
#if OPENSSL_VERSION_NUMBER < 0x10100000L
|
#ifndef OPENSSL_NO_SSL3
|
||||||
SSL_CTX_set_ssl_version(ssl_ctx, SSLv3_method());
|
SSL_CTX_set_ssl_version(ssl_ctx, SSLv3_method());
|
||||||
#else
|
#else
|
||||||
SSL_CTX_set_ssl_version(ssl_ctx, SSLv23_method());
|
SSL_CTX_set_ssl_version(ssl_ctx, SSLv23_method());
|
||||||
|
SSL_CTX_set_options(ssl_ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_TLSv1
|
||||||
|
#ifdef SSL_OP_NO_TLSv1_2
|
||||||
|
| SSL_OP_NO_TLSv1_1 | SSL_OP_NO_TLSv1_2
|
||||||
|
#endif
|
||||||
|
);
|
||||||
#endif
|
#endif
|
||||||
}
|
}
|
||||||
else
|
else
|
||||||
|
Loading…
Reference in New Issue
Block a user