diff options
| -rw-r--r-- | src/mongo/util/net/ssl_manager.cpp | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/mongo/util/net/ssl_manager.cpp b/src/mongo/util/net/ssl_manager.cpp index dd8b3a2fe6f..0efdd7ced60 100644 --- a/src/mongo/util/net/ssl_manager.cpp +++ b/src/mongo/util/net/ssl_manager.cpp @@ -140,7 +140,9 @@ namespace mongo { _context); // Activate all bug workaround options, to support buggy client SSL's. - SSL_CTX_set_options(_context, SSL_OP_ALL); + // SSL_OP_NO_SSLv2 - Disable SSL v2 support + // SSL_OP_NO_SSLv3 - Disable SSL v3 support + SSL_CTX_set_options(*context, SSL_OP_ALL|SSL_OP_NO_SSLv2|SSL_OP_NO_SSLv3); // If renegotiation is needed, don't return from recv() or send() until it's successful. // Note: this is for blocking sockets only. |