pegasus/anope
1
0
Fork 0
mirror of https://github.com/anope/anope.git synced 2026-07-03 05:13:14 +02:00
Code Activity

m_ssl_openssl: Allow disabling SSLv3 via the config

Browse Source
This commit is contained in:
Attila Molnar
2015-03-11 23:53:10 +01:00
parent a57e41304f
commit 1bee18fcf4
2 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
data/modules.example.conf
+8
View File
@@ -620,6 +620,14 @@ module { name = "help" }
*/
cert = "data/anope.crt"
key = "data/anope.key"
/*
* As of 2014 SSL 3.0 is considered insecure, but it might be enabled
* on some systems by default for compatibility reasons.
* You can use the following option to enable or disable it explicitly.
* Leaving this option not set defaults to the default system behavior.
*/
#sslv3 = no
}
/*
modules/extra/m_ssl_openssl.cpp
+14
View File
@@ -162,6 +162,20 @@ class SSLModule : public Module
Log() << "Unable to open private key " << this->keyfile;
}
// Allow disabling SSLv3
if (!config->Get<Anope::string>("sslv3").empty())
{
if (config->Get<bool>("sslv3"))
{
SSL_CTX_clear_options(client_ctx, SSL_OP_NO_SSLv3);
SSL_CTX_clear_options(server_ctx, SSL_OP_NO_SSLv3);
}
else
{
SSL_CTX_set_options(client_ctx, SSL_OP_NO_SSLv3);
SSL_CTX_set_options(server_ctx, SSL_OP_NO_SSLv3);
}
}
}
void OnPreServerConnect() anope_override