Disable SSLv2 cipher suites by default and avoid SSLv2 compatible client
authorDr. Stephen Henson <steve@openssl.org>
Tue, 7 Apr 2009 17:01:07 +0000 (17:01 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Tue, 7 Apr 2009 17:01:07 +0000 (17:01 +0000)
commit9ae5743515f88f481c0e1075c21404e67d9cc197
tree208d8375f419e4da15dc8eb9f40e181b7e99320e
parentc184b140df83ef5e91abf3e1d405059f898269d6
Disable SSLv2 cipher suites by default and avoid SSLv2 compatible client
hello if no SSLv2 cipher suites are included. This effectively disables
the broken SSLv2 use by default.
CHANGES
ssl/s23_clnt.c
ssl/ssl.h