Commit: 4ea375bcbbcbdbe0c76e5abed90f817af6e9c7b3 - ffftp (git)

Loweynet

Commit MetaInfo

• Revisión: 4ea375bcbbcbdbe0c76e5abed90f817af6e9c7b3 (tree)
• Tiempo: 2014-10-15 22:12:30
• Autor: s_kawamoto <s_kawamoto@user...>
• Commiter: s_kawamoto

Log Message

Treat SSL 3.0 as a weak encryption method and change not to use it by default.

Cambiar Resumen

• modified: FFFTP_Eng_Release/FFFTP.exe
• modified: Release/FFFTP.exe
• modified: socketwrapper.c

Diferencia incremental

Binary files a/FFFTP_Eng_Release/FFFTP.exe and b/FFFTP_Eng_Release/FFFTP.exe differ

Binary files a/Release/FFFTP.exe and b/Release/FFFTP.exe differ

--- a/socketwrapper.c
+++ b/socketwrapper.c
@@ -705,7 +705,7 @@ BOOL AttachSSL(SOCKET s, SOCKET parent, BOOL* pbAborted, BOOL bStrengthen)
 					{
 						if(bStrengthen)
 						{
-							p_SSL_ctrl(*ppSSL, SSL_CTRL_OPTIONS, SSL_OP_NO_SSLv2, NULL);
+							p_SSL_ctrl(*ppSSL, SSL_CTRL_OPTIONS, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3, NULL);
 							p_SSL_set_cipher_list(*ppSSL, "HIGH");
 						}
 					}