From 3ddb39faf72f52fe4089e40cd9fe75cb11965fe1 Mon Sep 17 00:00:00 2001 From: manuel Date: Mon, 16 Apr 2018 15:53:39 +0200 Subject: Disable SSLv3 and enable prefer server ciphers --- qmail-remote.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'qmail-remote.c') diff --git a/qmail-remote.c b/qmail-remote.c index adb7343..6c7fba0 100644 --- a/qmail-remote.c +++ b/qmail-remote.c @@ -483,7 +483,7 @@ int tls_init() smtptext.len = 0; tls_quit_error("ZTLS error initializing ctx"); } - SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv2); + SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3); if (servercert) { if (!SSL_CTX_load_verify_locations(ctx, servercert, NULL)) { -- cgit v1.2.3