From d75ca0c1fdf8e4d0c15ccdf7573c9d8c762fdaa4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dag-Erling=20Sm=C3=B8rgrav?= Date: Wed, 15 Oct 2014 02:34:26 +0000 Subject: [PATCH] Drop support for SSLv3. MFC after: 1 week --- lib/libfetch/common.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/libfetch/common.c b/lib/libfetch/common.c index a6fc47c60e4..498ef4878d6 100644 --- a/lib/libfetch/common.c +++ b/lib/libfetch/common.c @@ -820,7 +820,7 @@ fetch_ssl(conn_t *conn, const struct url *URL, int verbose) SSL_load_error_strings(); - conn->ssl_meth = SSLv23_client_method(); + conn->ssl_meth = TLSv1_client_method(); conn->ssl_ctx = SSL_CTX_new(conn->ssl_meth); SSL_CTX_set_mode(conn->ssl_ctx, SSL_MODE_AUTO_RETRY);