Commit 5d59adc5 authored by Tatsuhiro Tsujikawa's avatar Tatsuhiro Tsujikawa

libevent-server: Disable SSLv3

parent 770cfcaa
...@@ -103,7 +103,8 @@ static SSL_CTX* create_ssl_ctx(const char *key_file, const char *cert_file) ...@@ -103,7 +103,8 @@ static SSL_CTX* create_ssl_ctx(const char *key_file, const char *cert_file)
ERR_error_string(ERR_get_error(), NULL)); ERR_error_string(ERR_get_error(), NULL));
} }
SSL_CTX_set_options(ssl_ctx, SSL_CTX_set_options(ssl_ctx,
SSL_OP_ALL | SSL_OP_NO_SSLv2 | SSL_OP_NO_COMPRESSION | SSL_OP_ALL | SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 |
SSL_OP_NO_COMPRESSION |
SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION); SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION);
ecdh = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1); ecdh = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment