diff options
| author | Remi Collet <fedora@famillecollet.com> | 2016-03-17 15:15:30 +0100 |
|---|---|---|
| committer | Jakub Zelenka <bukka@php.net> | 2016-07-17 16:41:47 +0100 |
| commit | d30b6a85b28d75aa4b8e721afe17abd8885f5ad2 (patch) | |
| tree | b6eaea268348fb83990637061b38545083a7e709 | |
| parent | 642aee1debc981f13323c69a4880a923a1e7f92b (diff) | |
| download | php-git-d30b6a85b28d75aa4b8e721afe17abd8885f5ad2.tar.gz | |
force SSL_OP_NO_SSLv2
| -rw-r--r-- | ext/openssl/xp_ssl.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/ext/openssl/xp_ssl.c b/ext/openssl/xp_ssl.c index c381e3dd37..edc1c17ab3 100644 --- a/ext/openssl/xp_ssl.c +++ b/ext/openssl/xp_ssl.c @@ -991,6 +991,9 @@ static int php_get_crypto_method_ctx_flags(int method_flags) /* {{{ */ { int ssl_ctx_options = SSL_OP_ALL; +#ifdef SSL_OP_NO_SSLv2 + ssl_ctx_options |= SSL_OP_NO_SSLv2; +#endif #ifdef HAVE_SSL3 if (!(method_flags & STREAM_CRYPTO_METHOD_SSLv3)) { ssl_ctx_options |= SSL_OP_NO_SSLv3; |