1
0
mirror of https://github.com/unrealircd/unrealircd.git synced 2026-07-07 05:13:11 +02:00

Secure server to server links were previously hardcoded at SSLv3. This has

been fixed to be 'SSLv3 or later'.  In practice this means that you will now
see a lot more server-to-server links using TLSv1.2.
This commit is contained in:
Bram Matthys
2014-01-09 21:39:36 +01:00
parent b16af31e83
commit 0fa5dec7d7
+2 -1
View File
@@ -248,13 +248,14 @@ SSL_CTX *init_ctx_client(void)
{
SSL_CTX *ctx_client;
ctx_client = SSL_CTX_new(SSLv3_client_method());
ctx_client = SSL_CTX_new(SSLv23_client_method());
if (!ctx_client)
{
mylog("Failed to do SSL CTX new client");
return NULL;
}
SSL_CTX_set_default_passwd_cb(ctx_client, ssl_pem_passwd_cb);
SSL_CTX_set_options(ctx_server, SSL_OP_NO_SSLv2);
SSL_CTX_set_session_cache_mode(ctx_client, SSL_SESS_CACHE_OFF);
if (SSL_CTX_use_certificate_file(ctx_client, SSL_SERVER_CERT_PEM, SSL_FILETYPE_PEM) <= 0)
{