Software / code / prosody
Diff
net/http.lua @ 6496:e4b998ffc922 0.9.6
certmanager, net.http: Disable SSLv3 by default
| author | Matthew Wild <mwild1@gmail.com> |
|---|---|
| date | Tue, 14 Oct 2014 18:55:08 +0100 |
| parent | 6380:4220ffb87b22 |
| child | 6501:71b6e8b48a12 |
line wrap: on
line diff
--- a/net/http.lua Tue Oct 14 10:58:11 2014 +0100 +++ b/net/http.lua Tue Oct 14 18:55:08 2014 +0100 @@ -175,7 +175,7 @@ local sslctx = false; if using_https then - sslctx = ex and ex.sslctx or { mode = "client", protocol = "sslv23", options = { "no_sslv2" } }; + sslctx = ex and ex.sslctx or { mode = "client", protocol = "sslv23", options = { "no_sslv2", "no_sslv3" } }; end req.handler, req.conn = assert(server.wrapclient(conn, host, port_number, listener, "*a", sslctx));
