storm/w3m
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Force ssl_verify_server on and disable SSLv2 support

Browse Source 
Origin: http://www.openwall.com/lists/oss-security/2010/06/14/4
This commit is contained in:
Ludwig Nussel
2014-10-15 18:11:45 +09:00
committed by Tatsuya Kinoshita
parent dbd52ac2ca
commit 05503271df
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
fm.h
View File

@@ -1135,7 +1135,7 @@ global int view_unseenobject init(TRUE);
#endif
#if defined(USE_SSL) && defined(USE_SSL_VERIFY)
global int ssl_verify_server init(FALSE);
global int ssl_verify_server init(TRUE);
global char *ssl_cert_file init(NULL);
global char *ssl_key_file init(NULL);
global char *ssl_ca_path init(NULL);
@@ -1144,7 +1144,7 @@ global int ssl_path_modified init(FALSE);
#endif /* defined(USE_SSL) &&
* defined(USE_SSL_VERIFY) */
#ifdef USE_SSL
global char *ssl_forbid_method init(NULL);
global char *ssl_forbid_method init("2");
#endif
global int is_redisplay init(FALSE);