mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-24 01:42:58 +02:00
dma: Don't only use TLSv1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
26
src/patches/dma-0.10-better-tls.patch
Normal file
26
src/patches/dma-0.10-better-tls.patch
Normal file
@@ -0,0 +1,26 @@
|
||||
commit e94f50bbbe7318eec5b6b165ff73d94bbc9d20b0
|
||||
Author: Michael Tremer <michael.tremer@ipfire.org>
|
||||
Date: Sun Feb 11 11:05:43 2018 +0000
|
||||
|
||||
crypto: Don't limit to TLSv1 only
|
||||
|
||||
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
|
||||
|
||||
diff --git a/crypto.c b/crypto.c
|
||||
index 897b55bfdcfc..440c882880b5 100644
|
||||
--- a/crypto.c
|
||||
+++ b/crypto.c
|
||||
@@ -93,7 +93,12 @@ smtp_init_crypto(int fd, int feature)
|
||||
SSL_library_init();
|
||||
SSL_load_error_strings();
|
||||
|
||||
- meth = TLSv1_client_method();
|
||||
+ // Allow any possible version
|
||||
+#if (OPENSSL_VERSION_NUMBER >= 0x10100000L)
|
||||
+ meth = TLS_client_method();
|
||||
+#else
|
||||
+ meth = SSLv23_client_method();
|
||||
+#endif
|
||||
|
||||
ctx = SSL_CTX_new(meth);
|
||||
if (ctx == NULL) {
|
||||
Reference in New Issue
Block a user