Mercurial > prosody-hg
comparison net/http.lua @ 6496:e4b998ffc922 0.9.6
certmanager, net.http: Disable SSLv3 by default
| author | Matthew Wild <mwild1@gmail.com> |
|---|---|
| date | Tue, 14 Oct 2014 18:55:08 +0100 |
| parents | 4220ffb87b22 |
| children | 71b6e8b48a12 |
comparison
equal
deleted
inserted
replaced
| 6472:acae6289e0a6 | 6496:e4b998ffc922 |
|---|---|
| 173 return nil, err; | 173 return nil, err; |
| 174 end | 174 end |
| 175 | 175 |
| 176 local sslctx = false; | 176 local sslctx = false; |
| 177 if using_https then | 177 if using_https then |
| 178 sslctx = ex and ex.sslctx or { mode = "client", protocol = "sslv23", options = { "no_sslv2" } }; | 178 sslctx = ex and ex.sslctx or { mode = "client", protocol = "sslv23", options = { "no_sslv2", "no_sslv3" } }; |
| 179 end | 179 end |
| 180 | 180 |
| 181 req.handler, req.conn = assert(server.wrapclient(conn, host, port_number, listener, "*a", sslctx)); | 181 req.handler, req.conn = assert(server.wrapclient(conn, host, port_number, listener, "*a", sslctx)); |
| 182 req.write = function (...) return req.handler:write(...); end | 182 req.write = function (...) return req.handler:write(...); end |
| 183 | 183 |
