Mercurial > hg > nginx

comparison src/event/ngx_event_openssl.c @ 3815:c6a5bae994f6

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
remove SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG becuase of CVE-2010-4180
author Igor Sysoev <igor@sysoev.ru>
date Mon, 06 Dec 2010 11:17:03 +0000
parents bfd84b583868
children 033015e01eec
comparison
equal deleted inserted replaced
3814:e6e453203bae 3815:c6a5bae994f6
153 153
154 /* client side options */ 154 /* client side options */
155 155
156 SSL_CTX_set_options(ssl->ctx, SSL_OP_MICROSOFT_SESS_ID_BUG); 156 SSL_CTX_set_options(ssl->ctx, SSL_OP_MICROSOFT_SESS_ID_BUG);
157 SSL_CTX_set_options(ssl->ctx, SSL_OP_NETSCAPE_CHALLENGE_BUG); 157 SSL_CTX_set_options(ssl->ctx, SSL_OP_NETSCAPE_CHALLENGE_BUG);
158 SSL_CTX_set_options(ssl->ctx, SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG);
159 158
160 /* server side options */ 159 /* server side options */
161 160
162 SSL_CTX_set_options(ssl->ctx, SSL_OP_SSLREF2_REUSE_CERT_TYPE_BUG); 161 SSL_CTX_set_options(ssl->ctx, SSL_OP_SSLREF2_REUSE_CERT_TYPE_BUG);
163 SSL_CTX_set_options(ssl->ctx, SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER); 162 SSL_CTX_set_options(ssl->ctx, SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER);