aboutsummaryrefslogtreecommitdiffstats
path: root/core/certmanager.lua
diff options
context:
space:
mode:
authorMatthew Wild <mwild1@gmail.com>2014-10-14 18:55:08 +0100
committerMatthew Wild <mwild1@gmail.com>2014-10-14 18:55:08 +0100
commitcc4e899808c88f286cd888644127abc2c9530b41 (patch)
treee267f4722b8414541b27c335ae0816b0a2d3e7b5 /core/certmanager.lua
parenta211c6772706424c5fb8d19ea2de2c0e0af10da4 (diff)
downloadprosody-cc4e899808c88f286cd888644127abc2c9530b41.tar.gz
prosody-cc4e899808c88f286cd888644127abc2c9530b41.zip
certmanager, net.http: Disable SSLv3 by default
Diffstat (limited to 'core/certmanager.lua')
-rw-r--r--core/certmanager.lua2
1 files changed, 1 insertions, 1 deletions
diff --git a/core/certmanager.lua b/core/certmanager.lua
index d6784a96..624bd841 100644
--- a/core/certmanager.lua
+++ b/core/certmanager.lua
@@ -33,7 +33,7 @@ module "certmanager"
local default_ssl_config = configmanager.get("*", "ssl");
local default_capath = "/etc/ssl/certs";
local default_verify = (ssl and ssl.x509 and { "peer", "client_once", }) or "none";
-local default_options = { "no_sslv2", "cipher_server_preference", luasec_has_noticket and "no_ticket" or nil };
+local default_options = { "no_sslv2", "no_sslv3", "cipher_server_preference", luasec_has_noticket and "no_ticket" or nil };
local default_verifyext = { "lsec_continue", "lsec_ignore_purpose" };
if ssl and not luasec_has_verifyext and ssl.x509 then