com php-src: force SSL_OP_NO_SSLv2: ext/openssl/xp _ssl.c
| From: | Jakub Zelenka | Date: | Sun, 17 Jul 2016 15:41:47 +0000 |
| Subject: | com php-src: force SSL_OP_NO_SSLv2: ext/openssl/xp _ssl.c | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-93067@lists.php.net to get a copy of this message | ||
Commit: d30b6a85b28d75aa4b8e721afe17abd8885f5ad2
Author: Remi Collet <fedora@famillecollet.com> Thu, 17 Mar 2016 15:15:30 +0100
Committer: Jakub Zelenka <bukka@php.net> Sun, 17 Jul 2016 16:41:47 +0100
Parents: 642aee1debc981f13323c69a4880a923a1e7f92b
Branches: master
Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=d30b6a85b28d75aa4b8e721afe17abd8885f5ad2
Log:
force SSL_OP_NO_SSLv2
Changed paths:
M ext/openssl/xp_ssl.c
Diff:
diff --git a/ext/openssl/xp_ssl.c b/ext/openssl/xp_ssl.c
index c381e3d..edc1c17 100644
--- a/ext/openssl/xp_ssl.c
+++ b/ext/openssl/xp_ssl.c
@@ -991,6 +991,9 @@ static int php_get_crypto_method_ctx_flags(int method_flags) /* {{{ */
{
int ssl_ctx_options = SSL_OP_ALL;
+#ifdef SSL_OP_NO_SSLv2
+ ssl_ctx_options |= SSL_OP_NO_SSLv2;
+#endif
#ifdef HAVE_SSL3
if (!(method_flags & STREAM_CRYPTO_METHOD_SSLv3)) {
ssl_ctx_options |= SSL_OP_NO_SSLv3;