mirror of
https://github.com/beard7n/bsdports.git
synced 2026-04-13 12:01:19 +02:00
17 lines
660 B
Plaintext
17 lines
660 B
Plaintext
--- WWW/Library/Implementation/HTTP.c.orig 2018-08-12 12:33:30 UTC
|
|
+++ WWW/Library/Implementation/HTTP.c
|
|
@@ -206,11 +206,8 @@ SSL *HTGetSSLHandle(void)
|
|
#else
|
|
SSLeay_add_ssl_algorithms();
|
|
if ((ssl_ctx = SSL_CTX_new(TLS_client_method())) != NULL) {
|
|
-#ifdef SSL_OP_NO_SSLv2
|
|
- SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL | SSL_OP_NO_SSLv2);
|
|
-#else
|
|
- SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL);
|
|
-#endif
|
|
+ /* Always disable SSLv2 & SSLv3 to "mitigate POODLE vulnerability". */
|
|
+ SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL | SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3);
|
|
#ifdef SSL_OP_NO_COMPRESSION
|
|
SSL_CTX_set_options(ssl_ctx, SSL_OP_NO_COMPRESSION);
|
|
#endif
|