From 5ebdb394fc50c66bb36feb2c0849341a646b5625 Mon Sep 17 00:00:00 2001 From: Takuho NAKANO Date: Tue, 5 May 2020 17:34:13 +0900 Subject: [PATCH] Disable sslv3 --- src/Mayaqua/Network.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/Mayaqua/Network.c b/src/Mayaqua/Network.c index 717d0f9d..9dfc24b9 100644 --- a/src/Mayaqua/Network.c +++ b/src/Mayaqua/Network.c @@ -5737,7 +5737,10 @@ SSL_PIPE *NewSslPipeEx(bool server_mode, X *x, K *k, DH_CTX *dh, bool verify_pee if (server_mode) { SSL_CTX_set_ssl_version(ssl_ctx, SSLv23_server_method()); - SSL_CTX_set_options(ssl_ctx, SSL_OP_NO_SSLv2); + +#ifdef SSL_OP_NO_SSLv3 + SSL_CTX_set_options(ssl_ctx, SSL_OP_NO_SSLv3); +#endif // SSL_OP_NO_SSLv3 #ifdef SSL_OP_NO_TLSv1_3 SSL_CTX_set_options(ssl_ctx, SSL_OP_NO_TLSv1_3); // For some reason pppd under linux doesn't like it