1
0
mirror of https://github.com/unrealircd/unrealircd.git synced 2026-07-10 06:23:13 +02:00

Make it so UnrealIRCd has full control over the SSL/TLS versions in use

and not just the operating system.
This makes us use SSL_CTX_set_min_proto_version(), which unfortunately is
a less fine-grained control for disabling specific SSL/TLS versions.
However, after that we use SSL_CTX_set_options with SSL_OP_NO_xxx.
The latter is deprecated though. Will revisit this change before U5 release..
This commit is contained in:
Bram Matthys
2019-07-07 10:22:29 +02:00
parent 73bbf10170
commit 79bd78c0f3
5 changed files with 81 additions and 6 deletions
+3
View File
@@ -43,6 +43,9 @@
/* Define if ssl library has SSL_CTX_set1_curves_list */
#undef HAS_SSL_CTX_SET1_CURVES_LIST
/* Define if ssl library has SSL_CTX_set_min_proto_version */
#undef HAS_SSL_CTX_SET_MIN_PROTO_VERSION
/* Define to 1 if you have the `bcmp' function. */
#undef HAVE_BCMP