diff options
| author | Kim Alvefur <zash@zash.se> | 2013-10-31 20:49:03 +0100 |
|---|---|---|
| committer | Kim Alvefur <zash@zash.se> | 2013-10-31 20:49:03 +0100 |
| commit | bd7462cf581915de5a04c36a3c48c6ed8ce5febe (patch) | |
| tree | fc4ccb38b95ca249345023b2a6b8dc0bf1054deb /core | |
| parent | 33de95fb8a9a209c1645035fb4488c0e7cbc3f1e (diff) | |
| parent | 8c121fdf945b9bcee916f5e3c14ae6e64b28d7eb (diff) | |
| download | prosody-bd7462cf581915de5a04c36a3c48c6ed8ce5febe.tar.gz prosody-bd7462cf581915de5a04c36a3c48c6ed8ce5febe.zip | |
Merge 0.10 -> trunk
Diffstat (limited to 'core')
| -rw-r--r-- | core/certmanager.lua | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/core/certmanager.lua b/core/certmanager.lua index e8030581..dc22bb46 100644 --- a/core/certmanager.lua +++ b/core/certmanager.lua @@ -37,7 +37,7 @@ local core_defaults = { capath = "/etc/ssl/certs"; protocol = "sslv23"; verify = (ssl and ssl.x509 and { "peer", "client_once", }) or "none"; - options = { "no_sslv2", luasec_has_noticket and "no_ticket" or nil }; + options = { "no_sslv2", "no_sslv3", luasec_has_noticket and "no_ticket" or nil }; verifyext = { "lsec_continue", "lsec_ignore_purpose" }; curve = "secp384r1"; ciphers = "HIGH:!DSS:!aNULL@STRENGTH"; |