disable SSLv3 by default. all agreed.

1 files changed, 4 insertions, 1 deletions

diff --git a/src/lib/libssl/src/ssl/ssl_lib.c b/src/lib/libssl/src/ssl/ssl_lib.c
index 6b62713bca..e1f7605898 100644
--- a/src/lib/libssl/src/ssl/ssl_lib.c
+++ b/src/lib/libssl/src/ssl/ssl_lib.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_lib.c,v 1.78 2014/07/12 22:33:39 jsing Exp $ */
+/* $OpenBSD: ssl_lib.c,v 1.78.4.1 2014/10/20 21:24:05 tedu Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -1823,6 +1823,9 @@ SSL_CTX_new(const SSL_METHOD *meth)
          */
         ret->options |= SSL_OP_LEGACY_SERVER_CONNECT;
 
+        /* Disable SSLv3 by default. */
+        ret->options |= SSL_OP_NO_SSLv3;
+
         return (ret);
 err:
         SSLerr(SSL_F_SSL_CTX_NEW,