Disable SSLv3 by default

Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Emilia Kasper <emilia@openssl.org>
MR: #2203

diff --git a/Configure b/Configure
index e57ff602f9a272e1598c8ec275d366e2c47ccdc0..cf4902322549621f015eab7d10d4be0375abdfa6 100755 (executable)
--- a/Configure
+++ b/Configure
@@ -340,6 +340,8 @@ our %disabled = ( # "what"         => "comment"
                  "sctp"                => "default",
                  "shared"              => "default",
                  "ssl-trace"           => "default",
+                 "ssl3"                => "default",
+                 "ssl3-method"         => "default",
                  "static-engine"       => "default",
                  "unit-test"           => "default",
                  "weak-ssl-ciphers"    => "default",