# HG changeset patch # User David Demelier # Date 1496142009 -7200 # Node ID f67540addf5a25103fdcf22388d7186468625320 # Parent b5338d71730c09a397b3df038ff2a282f3225860 Fix #653: fix SSL initialization error The external libircclient set some options that triggers error with OpenSSL 1.1 and greater. Task: #653 diff -r b5338d71730c -r f67540addf5a extern/libircclient/src/ssl.c --- a/extern/libircclient/src/ssl.c Tue May 30 12:45:03 2017 +0200 +++ b/extern/libircclient/src/ssl.c Tue May 30 13:00:09 2017 +0200 @@ -122,9 +122,11 @@ if ( !ssl_context ) return LIBIRC_ERR_SSL_INIT_FAILED; +#if 0 // Disable SSLv2 as it is unsecure if ( (SSL_CTX_set_options( ssl_context, SSL_OP_NO_SSLv2) & SSL_OP_NO_SSLv2) == 0 ) return LIBIRC_ERR_SSL_INIT_FAILED; +#endif // Enable only strong ciphers if ( SSL_CTX_set_cipher_list( ssl_context, "ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH" ) != 1 )