Mercurial > irccd
changeset 441:f67540addf5a release-2.1
Fix #653: fix SSL initialization error
The external libircclient set some options that triggers error with OpenSSL 1.1
and greater.
Task: #653
| author | David Demelier <markand@malikania.fr> |
|---|---|
| date | Tue, 30 May 2017 13:00:09 +0200 |
| parents | b5338d71730c |
| children | 315460895f85 |
| files | extern/libircclient/src/ssl.c |
| diffstat | 1 files changed, 2 insertions(+), 0 deletions(-) [+] |
line wrap: on
line diff
--- a/extern/libircclient/src/ssl.c Tue May 30 12:45:03 2017 +0200 +++ b/extern/libircclient/src/ssl.c Tue May 30 13:00:09 2017 +0200 @@ -122,9 +122,11 @@ if ( !ssl_context ) return LIBIRC_ERR_SSL_INIT_FAILED; +#if 0 // Disable SSLv2 as it is unsecure if ( (SSL_CTX_set_options( ssl_context, SSL_OP_NO_SSLv2) & SSL_OP_NO_SSLv2) == 0 ) return LIBIRC_ERR_SSL_INIT_FAILED; +#endif // Enable only strong ciphers if ( SSL_CTX_set_cipher_list( ssl_context, "ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH" ) != 1 )