aboutsummaryrefslogtreecommitdiffstats
path: root/net
diff options
context:
space:
mode:
authorMatthew Wild <mwild1@gmail.com>2013-03-20 20:31:52 +0000
committerMatthew Wild <mwild1@gmail.com>2013-03-20 20:31:52 +0000
commitc237eea8303441bc4cf5cd4f05eeb1d91d512b59 (patch)
treed2c50b12dcf99d03ae30b92a7b72a9ea2203b31b /net
parentf7e05e902acb3b0b5950d2ffcf68f4e8778f7d48 (diff)
downloadprosody-c237eea8303441bc4cf5cd4f05eeb1d91d512b59.tar.gz
prosody-c237eea8303441bc4cf5cd4f05eeb1d91d512b59.zip
net.http: Disable SSLv2 support for HTTPS connections
Diffstat (limited to 'net')
-rw-r--r--net/http.lua2
1 files changed, 1 insertions, 1 deletions
diff --git a/net/http.lua b/net/http.lua
index 9ed837e2..a1e4e523 100644
--- a/net/http.lua
+++ b/net/http.lua
@@ -190,7 +190,7 @@ function request(u, ex, callback)
local sslctx = false;
if using_https then
- sslctx = ex and ex.sslctx or { mode = "client", protocol = "sslv23" };
+ sslctx = ex and ex.sslctx or { mode = "client", protocol = "sslv23", options = { "no_sslv2" } };
end
req.handler, req.conn = server.wrapclient(conn, req.host, port, listener, "*a", sslctx);