From 5d59adc52b5777172d344d8e9ed73e651e9384ca Mon Sep 17 00:00:00 2001 From: Tatsuhiro Tsujikawa Date: Thu, 27 Nov 2014 21:40:34 +0900 Subject: [PATCH] libevent-server: Disable SSLv3 --- examples/libevent-server.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/examples/libevent-server.c b/examples/libevent-server.c index 0cd9a0d9..493dc87e 100644 --- a/examples/libevent-server.c +++ b/examples/libevent-server.c @@ -103,7 +103,8 @@ static SSL_CTX* create_ssl_ctx(const char *key_file, const char *cert_file) ERR_error_string(ERR_get_error(), NULL)); } SSL_CTX_set_options(ssl_ctx, - SSL_OP_ALL | SSL_OP_NO_SSLv2 | SSL_OP_NO_COMPRESSION | + SSL_OP_ALL | SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 | + SSL_OP_NO_COMPRESSION | SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION); ecdh = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);