comparison net/http.lua @ 6496:e4b998ffc922 0.9.6

certmanager, net.http: Disable SSLv3 by default
author Matthew Wild <mwild1@gmail.com>
date Tue, 14 Oct 2014 18:55:08 +0100
parents 4220ffb87b22
children 71b6e8b48a12
comparison
equal deleted inserted replaced
6472:acae6289e0a6 6496:e4b998ffc922
173 return nil, err; 173 return nil, err;
174 end 174 end
175 175
176 local sslctx = false; 176 local sslctx = false;
177 if using_https then 177 if using_https then
178 sslctx = ex and ex.sslctx or { mode = "client", protocol = "sslv23", options = { "no_sslv2" } }; 178 sslctx = ex and ex.sslctx or { mode = "client", protocol = "sslv23", options = { "no_sslv2", "no_sslv3" } };
179 end 179 end
180 180
181 req.handler, req.conn = assert(server.wrapclient(conn, host, port_number, listener, "*a", sslctx)); 181 req.handler, req.conn = assert(server.wrapclient(conn, host, port_number, listener, "*a", sslctx));
182 req.write = function (...) return req.handler:write(...); end 182 req.write = function (...) return req.handler:write(...); end
183 183