# HG changeset patch
# User Timo Sirainen <tss@iki.fi>
# Date 1264939499 -7200
# Node ID 449fa953210b50e4c0986d79aacb629f3000ac01
# Parent  6799298bfa274bb15596525f63c8e3c3605e3c81
login: Completely drop support for SSLv2.

diff -r 6799298bfa27 -r 449fa953210b src/login-common/ssl-proxy-openssl.c
--- a/src/login-common/ssl-proxy-openssl.c	Fri Jan 29 18:06:13 2010 +0200
+++ b/src/login-common/ssl-proxy-openssl.c	Sun Jan 31 14:04:59 2010 +0200
@@ -1098,7 +1098,7 @@
 	ctx->cipher_list = p_strdup(pool, set->ssl_cipher_list);
 	ctx->verify_client_cert = set->ssl_verify_client_cert;
 
-	ctx->ctx = ssl_ctx = SSL_CTX_new(SSLv23_server_method());
+	ctx->ctx = ssl_ctx = SSL_CTX_new(SSLv3_server_method());
 	if (ssl_ctx == NULL)
 		i_fatal("SSL_CTX_new() failed");
 	xnames = ssl_proxy_ctx_init(ssl_ctx, set);