Software / code / prosody
Comparison
net/httpserver.lua @ 2321:7e7484a4e821
Disable SSLv2 by default, it's known to be insecure.
| author | Paul Aurich <paul@darkrain42.org> |
|---|---|
| date | Fri, 04 Dec 2009 09:48:08 -0800 |
| parent | 2275:dd344b94d088 |
| child | 2360:f1832bf27f84 |
comparison
equal
deleted
inserted
replaced
| 2320:2ca7445b882a | 2321:7e7484a4e821 |
|---|---|
| 280 end | 280 end |
| 281 | 281 |
| 282 if ssl then | 282 if ssl then |
| 283 ssl.mode = "server"; | 283 ssl.mode = "server"; |
| 284 ssl.protocol = "sslv23"; | 284 ssl.protocol = "sslv23"; |
| 285 ssl.options = "no_sslv2"; | |
| 285 end | 286 end |
| 286 | 287 |
| 287 new{ port = port, interface = interface, | 288 new{ port = port, interface = interface, |
| 288 base = base, handler = handle_request, | 289 base = base, handler = handle_request, |
| 289 ssl = ssl, type = (ssl and "ssl") or "tcp" }; | 290 ssl = ssl, type = (ssl and "ssl") or "tcp" }; |