summarylogtreecommitdiffstats
path: root/oscam-remove-sslv3.diff
blob: cf4e82b79448221b3e95c765667c9efa078f8d18 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
diff --git a/module-webif-lib.c b/module-webif-lib.c
index bda2286..06f97fe 100644
--- a/module-webif-lib.c
+++ b/module-webif-lib.c
@@ -864,19 +864,7 @@ SSL_CTX *SSL_Webif_Init(void)
 	CRYPTO_set_dynlock_lock_callback(SSL_dyn_lock_function);
 	CRYPTO_set_dynlock_destroy_callback(SSL_dyn_destroy_function);
 
-	if(cfg.http_force_sslv3)
-	{
-		ctx = SSL_CTX_new(SSLv3_server_method());
-#ifdef SSL_CTX_clear_options
-		SSL_CTX_clear_options(ctx, SSL_OP_ALL); //we CLEAR all bug workarounds! This is for security reason
-#else
-		cs_log("WARNING: You enabled to force sslv3 but your system does not support to clear the ssl workarounds! SSL security will be reduced!");
-#endif
-		SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv2); // we force SSL v3 !
-		SSL_CTX_set_cipher_list(ctx, SSL_TXT_RC4);
-	}
-	else
-		{ ctx = SSL_CTX_new(SSLv23_server_method()); }
+	ctx = SSL_CTX_new(SSLv23_server_method());
 
 	char path[128];