aboutsummaryrefslogtreecommitdiffstats
path: root/core/hostmanager.lua
diff options
context:
space:
mode:
authorPaul Aurich <paul@darkrain42.org>2009-12-04 09:48:08 -0800
committerPaul Aurich <paul@darkrain42.org>2009-12-04 09:48:08 -0800
commitd92cd1e697553c1a8bd3b10f9326a0af3ec51f6d (patch)
tree28d94a882781122a4cae90d5357acc13d33160eb /core/hostmanager.lua
parent3b8737814d5de1e6ff97dd8b1bd5947c88e20be2 (diff)
downloadprosody-d92cd1e697553c1a8bd3b10f9326a0af3ec51f6d.tar.gz
prosody-d92cd1e697553c1a8bd3b10f9326a0af3ec51f6d.zip
Disable SSLv2 by default, it's known to be insecure.
Diffstat (limited to 'core/hostmanager.lua')
-rw-r--r--core/hostmanager.lua4
1 files changed, 2 insertions, 2 deletions
diff --git a/core/hostmanager.lua b/core/hostmanager.lua
index f89eaeba..713788dd 100644
--- a/core/hostmanager.lua
+++ b/core/hostmanager.lua
@@ -20,8 +20,8 @@ end
local incoming_s2s = _G.prosody.incoming_s2s;
-- These are the defaults if not overridden in the config
-local default_ssl_ctx = { mode = "client", protocol = "sslv23", capath = "/etc/ssl/certs", verify = "none"; };
-local default_ssl_ctx_in = { mode = "server", protocol = "sslv23", capath = "/etc/ssl/certs", verify = "none"; };
+local default_ssl_ctx = { mode = "client", protocol = "sslv23", capath = "/etc/ssl/certs", verify = "none", options = "no_sslv2"; };
+local default_ssl_ctx_in = { mode = "server", protocol = "sslv23", capath = "/etc/ssl/certs", verify = "none", options = "no_sslv2"; };
local log = require "util.logger".init("hostmanager");