From fb6186304bd579b2764aa119934bd93e7df885b4 Mon Sep 17 00:00:00 2001
From: XinyuHou <xinyu@synergy-project.org>
Date: Thu, 23 Apr 2015 12:47:17 +0100
Subject: [PATCH] Dropped SSLv3 support #4567

---
 src/lib/plugin/ns/SecureSocket.cpp | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/lib/plugin/ns/SecureSocket.cpp b/src/lib/plugin/ns/SecureSocket.cpp
index 8ff79369..5104c0d7 100644
--- a/src/lib/plugin/ns/SecureSocket.cpp
+++ b/src/lib/plugin/ns/SecureSocket.cpp
@@ -221,6 +221,10 @@ SecureSocket::initContext(bool server)
 	// create new context from method
 	SSL_METHOD* m = const_cast<SSL_METHOD*>(method);
 	m_ssl->m_context = SSL_CTX_new(m);
+
+	// drop SSLv3 support
+	SSL_CTX_set_options(m_ssl->m_context, SSL_OP_NO_SSLv3);
+
 	if (m_ssl->m_context == NULL) {
 		showError();
 	}