bashclub/piler
1
0
Fork 0
mirror of https://bitbucket.org/jsuto/piler.git synced 2025-01-12 10:00:11 +01:00
Code Issues Packages Projects Releases Wiki Activity

sslv3 fix

Browse Source
This commit is contained in:
SJ 2014-10-15 22:53:09 +02:00
parent 636f673d3f
commit 3aa0ebe4a6
2 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/piler.c
View File

@ -260,7 +260,7 @@ int init_ssl(){
SSL_library_init(); SSL_library_init();
SSL_load_error_strings(); SSL_load_error_strings();
data.ctx = SSL_CTX_new(SSLv23_server_method()); data.ctx = SSL_CTX_new(TLSv1_server_method());
if(data.ctx == NULL){ syslog(LOG_PRIORITY, "SSL_CTX_new() failed"); return ERR; } if(data.ctx == NULL){ syslog(LOG_PRIORITY, "SSL_CTX_new() failed"); return ERR; }

3
src/session.c
View File

@ -370,6 +370,9 @@ AFTER_PERIOD:
if(data->ctx){ if(data->ctx){
data->ssl = SSL_new(data->ctx); data->ssl = SSL_new(data->ctx);
if(data->ssl){ if(data->ssl){
SSL_set_options(data->ssl, SSL_OP_NO_SSLv2|SSL_OP_NO_SSLv3);
if(SSL_set_fd(data->ssl, new_sd) == 1){ if(SSL_set_fd(data->ssl, new_sd) == 1){
strncat(resp, SMTP_RESP_220_READY_TO_START_TLS, MAXBUFSIZE-1); strncat(resp, SMTP_RESP_220_READY_TO_START_TLS, MAXBUFSIZE-1);
starttls = 1; starttls = 1;