jh163888/xrdp
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

always set SSL_OP_NO_SSLv2 in TLS options

Browse Source
This commit is contained in:
Jay Sorg 2016-08-25 11:38:03 -07:00
parent 47124df4ed
commit 8f747e37ca
1 changed files with 1 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
common/ssl_calls.c
View File

@ -601,14 +601,11 @@ ssl_tls_accept(struct ssl_tls *self, int disableSSLv3,
* SSLv3 is used by, eg. Microsoft RDC for Mac OS X. * SSLv3 is used by, eg. Microsoft RDC for Mac OS X.
* No SSLv3 if disableSSLv3=yes so only tls used * No SSLv3 if disableSSLv3=yes so only tls used
*/ */
options |= SSL_OP_NO_SSLv2;
if (disableSSLv3) if (disableSSLv3)
{ {
options |= SSL_OP_NO_SSLv3; options |= SSL_OP_NO_SSLv3;
} }
else
{
options |= SSL_OP_NO_SSLv2;
}
#if defined(SSL_OP_NO_COMPRESSION) #if defined(SSL_OP_NO_COMPRESSION)
/** /**