commit 448ea506bf075c22680fc2d45477f78ceb11d8cf
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Mon Jan 12 11:40:14 2015 +0100
committer Manuel Pégourié-Gonnard <mpg@elzevir.fr> Mon Jan 12 12:32:04 2015 +0100
tree f8f0795884b01d7594e55d5e475f50231326944f
parent d68b65199f1b747b53b9cb9c4ace1f48cf12a94e

Set min version to TLS 1.0 in programs

programs/ssl/ssl_fork_server.c

diff --git a/programs/ssl/ssl_fork_server.c b/programs/ssl/ssl_fork_server.c
index 706cdd4..ae1e155 100644
--- a/programs/ssl/ssl_fork_server.c
+++ b/programs/ssl/ssl_fork_server.c
@@ -264,6 +264,10 @@
         ssl_set_endpoint( &ssl, SSL_IS_SERVER );
         ssl_set_authmode( &ssl, SSL_VERIFY_NONE );
 
+        /* SSLv3 is deprecated, set minimum to TLS 1.0 */
+        ssl_set_min_version( &ssl, SSL_MAJOR_VERSION_3,
+                                   SSL_MINOR_VERSION_1 );
+
         ssl_set_rng( &ssl, ctr_drbg_random, &ctr_drbg );
         ssl_set_dbg( &ssl, my_debug, stdout );
         ssl_set_bio( &ssl, net_recv, &client_fd,