changeset 10609:449fa953210b HEAD

login: Completely drop support for SSLv2.
author Timo Sirainen <tss@iki.fi>
date Sun, 31 Jan 2010 14:04:59 +0200
parents 6799298bfa27
children 5a10d0fb008d
files src/login-common/ssl-proxy-openssl.c
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/src/login-common/ssl-proxy-openssl.c	Fri Jan 29 18:06:13 2010 +0200
+++ b/src/login-common/ssl-proxy-openssl.c	Sun Jan 31 14:04:59 2010 +0200
@@ -1098,7 +1098,7 @@
 	ctx->cipher_list = p_strdup(pool, set->ssl_cipher_list);
 	ctx->verify_client_cert = set->ssl_verify_client_cert;
 
-	ctx->ctx = ssl_ctx = SSL_CTX_new(SSLv23_server_method());
+	ctx->ctx = ssl_ctx = SSL_CTX_new(SSLv3_server_method());
 	if (ssl_ctx == NULL)
 		i_fatal("SSL_CTX_new() failed");
 	xnames = ssl_proxy_ctx_init(ssl_ctx, set);