Allow using -SSLv2 again when setting Protocol in the config.

RT#3625

Reviewed-by: Emilia Käsper <emilia@openssl.org>

diff --git a/ssl/ssl_conf.c b/ssl/ssl_conf.c
index 3785b4f78ffe6e7b7646bf7fd34f8f42567afd1d..95ca88adfe4ccc419801d18a255f5c7ccd4df810 100644 (file)
--- a/ssl/ssl_conf.c
+++ b/ssl/ssl_conf.c
@@ -333,6 +333,7 @@ static int cmd_Protocol(SSL_CONF_CTX *cctx, const char *value)
        static const ssl_flag_tbl ssl_protocol_list[] =
                {
                SSL_FLAG_TBL_INV("ALL", SSL_OP_NO_SSL_MASK),
+               SSL_FLAG_TBL_INV("SSLv2", SSL_OP_NO_SSLv2),
                SSL_FLAG_TBL_INV("SSLv3", SSL_OP_NO_SSLv3),
                SSL_FLAG_TBL_INV("TLSv1", SSL_OP_NO_TLSv1),
                SSL_FLAG_TBL_INV("TLSv1.1", SSL_OP_NO_TLSv1_1),