prosody
473627393d40
net/httpserver.lua

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody

Comparison

net/httpserver.lua @ 2767:473627393d40

Disable SSLv2 by default, it's known to be insecure.
author Paul Aurich <paul@darkrain42.org>
date Fri, 04 Dec 2009 09:48:08 -0800
parent 2761:5d3ad9a6b3be
child 2775:72b31799b0cb
comparison
equal deleted inserted replaced
2766:5fe6ea49cf70 2767:473627393d40
280 end 280 end
281 281
282 if ssl then 282 if ssl then
283 ssl.mode = "server"; 283 ssl.mode = "server";
284 ssl.protocol = "sslv23"; 284 ssl.protocol = "sslv23";
285 ssl.options = "no_sslv2";
285 end 286 end
286 287
287 new{ port = port, interface = interface, 288 new{ port = port, interface = interface,
288 base = base, handler = handle_request, 289 base = base, handler = handle_request,
289 ssl = ssl, type = (ssl and "ssl") or "tcp" }; 290 ssl = ssl, type = (ssl and "ssl") or "tcp" };