aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMatthew Wild <mwild1@gmail.com>2013-03-20 20:31:52 +0000
committerMatthew Wild <mwild1@gmail.com>2013-03-20 20:31:52 +0000
commit0c46e400afa7fef669b2f3a9ea2ed76633e8652b (patch)
treed2c50b12dcf99d03ae30b92a7b72a9ea2203b31b
parent375e615103568f5de0f2f8722768f48850760a29 (diff)
downloadprosody-0c46e400afa7fef669b2f3a9ea2ed76633e8652b.tar.gz
prosody-0c46e400afa7fef669b2f3a9ea2ed76633e8652b.zip
net.http: Disable SSLv2 support for HTTPS connections
-rw-r--r--net/http.lua2
1 files changed, 1 insertions, 1 deletions
diff --git a/net/http.lua b/net/http.lua
index 9ed837e2..a1e4e523 100644
--- a/net/http.lua
+++ b/net/http.lua
@@ -190,7 +190,7 @@ function request(u, ex, callback)
local sslctx = false;
if using_https then
- sslctx = ex and ex.sslctx or { mode = "client", protocol = "sslv23" };
+ sslctx = ex and ex.sslctx or { mode = "client", protocol = "sslv23", options = { "no_sslv2" } };
end
req.handler, req.conn = server.wrapclient(conn, req.host, port, listener, "*a", sslctx);