Merge pull request #4033 from PeterCxy/patch-disable-sslv3

net: disable SSLv3
This commit is contained in:
Dominik Picheta 2016-04-04 09:41:49 +01:00
commit 147961d006

View file

@ -222,9 +222,9 @@ when defined(ssl):
of protSSLv23: of protSSLv23:
newCTX = SSL_CTX_new(SSLv23_method()) # SSlv2,3 and TLS1 support. newCTX = SSL_CTX_new(SSLv23_method()) # SSlv2,3 and TLS1 support.
of protSSLv2: of protSSLv2:
raiseSslError("SSLv2 is no longer secure and has been deprecated, use protSSLv3") raiseSslError("SSLv2 is no longer secure and has been deprecated, use protSSLv23")
of protSSLv3: of protSSLv3:
newCTX = SSL_CTX_new(SSLv3_method()) raiseSslError("SSLv3 is no longer secure and has been deprecated, use protSSLv23")
of protTLSv1: of protTLSv1:
newCTX = SSL_CTX_new(TLSv1_method()) newCTX = SSL_CTX_new(TLSv1_method())