diff options
| author | Paul Aurich <paul@darkrain42.org> | 2009-12-04 09:48:08 -0800 |
|---|---|---|
| committer | Paul Aurich <paul@darkrain42.org> | 2009-12-04 09:48:08 -0800 |
| commit | a5dcc1d8c6f4a0d38b0ddc84033c1dabf9127fba (patch) | |
| tree | a16f32783467fe55aa10f7789166b29bdc8c03fd /net | |
| parent | c82b309e7884e380d28b4326395c3bc52b7b3d8d (diff) | |
| download | prosody-a5dcc1d8c6f4a0d38b0ddc84033c1dabf9127fba.tar.gz prosody-a5dcc1d8c6f4a0d38b0ddc84033c1dabf9127fba.zip | |
Disable SSLv2 by default, it's known to be insecure.
Diffstat (limited to 'net')
| -rw-r--r-- | net/httpserver.lua | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/net/httpserver.lua b/net/httpserver.lua index 7366351e..beaa3d64 100644 --- a/net/httpserver.lua +++ b/net/httpserver.lua @@ -282,6 +282,7 @@ function new_from_config(ports, handle_request, default_options) if ssl then ssl.mode = "server"; ssl.protocol = "sslv23"; + ssl.options = "no_sslv2"; end new{ port = port, interface = interface, |