From 4a715b8e085319c671d86638c326fd1bee14b9a6 Mon Sep 17 00:00:00 2001 From: Aman Gupta Date: Wed, 23 Sep 2015 12:03:14 -0700 Subject: [PATCH] disable SSLv2 --- lib/pure/net.nim | 5 +---- lib/pure/sockets.nim | 5 +---- 2 files changed, 2 insertions(+), 8 deletions(-) diff --git a/lib/pure/net.nim b/lib/pure/net.nim index 08e944727..48a973e8d 100644 --- a/lib/pure/net.nim +++ b/lib/pure/net.nim @@ -223,10 +223,7 @@ when defined(ssl): of protSSLv23: newCTX = SSL_CTX_new(SSLv23_method()) # SSlv2,3 and TLS1 support. of protSSLv2: - when not defined(linux) and not defined(macosx): - newCTX = SSL_CTX_new(SSLv2_method()) - else: - raiseSslError() + raiseSslError() of protSSLv3: newCTX = SSL_CTX_new(SSLv3_method()) of protTLSv1: diff --git a/lib/pure/sockets.nim b/lib/pure/sockets.nim index 29f0bf87d..1b76a3a5e 100644 --- a/lib/pure/sockets.nim +++ b/lib/pure/sockets.nim @@ -314,10 +314,7 @@ when defined(ssl): of protSSLv23: newCTX = SSL_CTX_new(SSLv23_method()) # SSlv2,3 and TLS1 support. of protSSLv2: - when not defined(linux) and not defined(OpenBSD): - newCTX = SSL_CTX_new(SSLv2_method()) - else: - raiseSslError() + raiseSslError() of protSSLv3: newCTX = SSL_CTX_new(SSLv3_method()) of protTLSv1: