diff options
| author | Alexis Campailla <alexis@janeasystems.com> | 2014-10-16 18:45:47 +0200 |
|---|---|---|
| committer | Alexis Campailla <alexis@janeasystems.com> | 2014-10-16 18:45:47 +0200 |
| commit | 3139fa20d78260399a1e5b577690007a8a451c73 (patch) | |
| tree | 8d724a537ac60160916d2aa4d09b6e404763b782 | |
| parent | 3859fbdb7dfa4132a77dbdc446f73f6ab8a10404 (diff) | |
| download | node-new-3139fa20d78260399a1e5b577690007a8a451c73.tar.gz | |
crypto: extra caution in setting ssl options
Always set ssl2/ssl3 disabled based on whether they are enabled in Node.
In some corner-case scenario, node with OPENSSL_NO_SSL3 defined could
be linked to openssl that has SSL3 enabled.
| -rw-r--r-- | src/node_crypto.cc | 4 |
1 files changed, 0 insertions, 4 deletions
diff --git a/src/node_crypto.cc b/src/node_crypto.cc index e56544d1ca..fbcdf86512 100644 --- a/src/node_crypto.cc +++ b/src/node_crypto.cc @@ -337,15 +337,11 @@ Handle<Value> SecureContext::Init(const Arguments& args) { int options = 0; -#ifndef OPENSSL_NO_SSL2 if (!SSL2_ENABLE) options |= SSL_OP_NO_SSLv2; -#endif -#ifndef OPENSSL_NO_SSL3 if (!SSL3_ENABLE) options |= SSL_OP_NO_SSLv3; -#endif SSL_CTX_set_options(sc->ctx_, options); |