Comparison

net/httpserver.lua @ 2321:7e7484a4e821

Disable SSLv2 by default, it's known to be insecure.
author Paul Aurich <paul@darkrain42.org>
date Fri, 04 Dec 2009 09:48:08 -0800
parent 2275:dd344b94d088
child 2360:f1832bf27f84
comparison
equal deleted inserted replaced
2320:2ca7445b882a 2321:7e7484a4e821
280 end 280 end
281 281
282 if ssl then 282 if ssl then
283 ssl.mode = "server"; 283 ssl.mode = "server";
284 ssl.protocol = "sslv23"; 284 ssl.protocol = "sslv23";
285 ssl.options = "no_sslv2";
285 end 286 end
286 287
287 new{ port = port, interface = interface, 288 new{ port = port, interface = interface,
288 base = base, handler = handle_request, 289 base = base, handler = handle_request,
289 ssl = ssl, type = (ssl and "ssl") or "tcp" }; 290 ssl = ssl, type = (ssl and "ssl") or "tcp" };