- Disable SSLv2 and enable all workarounds for buggy servers

- Keep memory usage low when openSSL supports SSL_MODE_RELEASE_BUFFERS
2011-08-15 17:55:58 -03:00 · 2011-08-15 17:55:58 -03:00 · e6f3c78103
parent fd3e7671a5
commit e6f3c78103
1 changed files with 7 additions and 0 deletions
--- a/src/LibsslTLSContext.cc
+++ b/src/LibsslTLSContext.cc
@ -55,7 +55,14 @@ TLSContext::TLSContext()
    A2_LOG_ERROR(fmt("SSL_CTX_new() failed. Cause: %s",
                     ERR_error_string(ERR_get_error(), 0)));
  }
+  /* Disable SSLv2 and enable all workarounds for buggy servers */
+  SSL_CTX_set_options(sslCtx_, SSL_OP_ALL|SSL_OP_NO_SSLv2);
  SSL_CTX_set_mode(sslCtx_, SSL_MODE_AUTO_RETRY);
+  #ifdef SSL_MODE_RELEASE_BUFFERS
+  /* keep memory usage low */
+  SSL_CTX_set_mode(sslCtx_, SSL_MODE_RELEASE_BUFFERS);
+  #endif
+  
 }

 TLSContext::~TLSContext()