Skip to content
This repository has been archived by the owner on Dec 14, 2020. It is now read-only.

Commit

Permalink
SSL: disable SSLv2 and SSLv3 support - we now only support TLS 1.0 fo…
Browse files Browse the repository at this point in the history
…r https access. That means IE6 users need to upgrade to something that's not as moldy.
  • Loading branch information
RMerl committed Oct 17, 2014
1 parent 9d09ea3 commit 5bb4c10
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion release/src/router/mssl/mssl.c
Expand Up @@ -243,7 +243,7 @@ int mssl_init(char *cert, char *priv)
// Create the new CTX with the method
// If server=1, use TLSv1_server_method() or SSLv23_server_method()
// else use TLSv1_client_method() or SSLv23_client_method()
ctx = SSL_CTX_new(server ? SSLv23_server_method() : SSLv23_client_method()); // SSLv23 for IE
ctx = SSL_CTX_new(server ? TLSv1_server_method() : TLSv1_client_method()); // TLS 1.0 min, SSL2 and 3 are unsafe

if (!ctx) {
fprintf(stderr,"[ssl_init] SSL_CTX_new() failed\n"); // tmp test
Expand Down

0 comments on commit 5bb4c10

Please sign in to comment.