Merge pull request #1 from crrodriguez/patch-1

Disable SSLv2 by default and optimize memory usage
pull/2/head
Tatsuhiro Tsujikawa 2011-08-16 01:23:32 -07:00
commit 58c5dc7928
1 changed files with 7 additions and 0 deletions

View File

@ -55,7 +55,14 @@ TLSContext::TLSContext()
A2_LOG_ERROR(fmt("SSL_CTX_new() failed. Cause: %s",
ERR_error_string(ERR_get_error(), 0)));
}
/* Disable SSLv2 and enable all workarounds for buggy servers */
SSL_CTX_set_options(sslCtx_, SSL_OP_ALL|SSL_OP_NO_SSLv2);
SSL_CTX_set_mode(sslCtx_, SSL_MODE_AUTO_RETRY);
#ifdef SSL_MODE_RELEASE_BUFFERS
/* keep memory usage low */
SSL_CTX_set_mode(sslCtx_, SSL_MODE_RELEASE_BUFFERS);
#endif
}
TLSContext::~TLSContext()