|
--- lua-openssl-0.6.0.old/src/ssl.c 2016-09-19 08:30:43.735075695 +0200
|
|
+++ lua-openssl-0.6.0/src/ssl.c 2016-09-19 09:02:45.733813437 +0200
|
|
@@ -24,12 +24,17 @@
|
|
SSL_METHOD* method = NULL;
|
|
const char* ciphers;
|
|
SSL_CTX* ctx;
|
|
- if (strcmp(meth, "SSLv3") == 0)
|
|
+ if (0);
|
|
+
|
|
+#ifndef OPENSSL_NO_SSL3
|
|
+ else if (strcmp(meth, "SSLv3") == 0)
|
|
method = SSLv3_method(); /* SSLv3 */
|
|
else if (strcmp(meth, "SSLv3_server") == 0)
|
|
method = SSLv3_server_method(); /* SSLv3 */
|
|
else if (strcmp(meth, "SSLv3_client") == 0)
|
|
method = SSLv3_client_method(); /* SSLv3 */
|
|
+#endif
|
|
+
|
|
else if (strcmp(meth, "SSLv23") == 0)
|
|
method = SSLv23_method(); /* SSLv3 but can rollback to v2 */
|
|
else if (strcmp(meth, "SSLv23_server") == 0)
|
|
@@ -79,15 +84,15 @@
|
|
#endif
|
|
else
|
|
luaL_error(L, "#1:%s not supported\n"
|
|
- "Maybe SSLv3 SSLv23 TLSv1 TLSv1_1 TLSv1_2 DTLSv1 [SSLv2], option followed by _client or _server\n",
|
|
- "default is SSLv3",
|
|
+ "Maybe [SSLv3] SSLv23 TLSv1 TLSv1_1 TLSv1_2 DTLSv1 [SSLv2], option followed by _client or _server\n",
|
|
+ "default is TLSv1",
|
|
meth);
|
|
ciphers = luaL_optstring(L, 2, SSL_DEFAULT_CIPHER_LIST);
|
|
ctx = SSL_CTX_new(method);
|
|
if (!ctx)
|
|
luaL_error(L, "#1:%s not supported\n"
|
|
- "Maybe SSLv3 SSLv23 TLSv1 TLSv1_1 TLSv1_2 DTLSv1 [SSLv2], option followed by _client or _server\n",
|
|
- "default is SSLv3",
|
|
+ "Maybe [SSLv3] SSLv23 TLSv1 TLSv1_1 TLSv1_2 DTLSv1 [SSLv2], option followed by _client or _server\n",
|
|
+ "default is TLSv1",
|
|
meth);
|
|
openssl_newvalue(L, ctx);
|
|
SSL_CTX_set_cipher_list(ctx, ciphers);
|