aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLudwig Nussel <ludwig.nussel@suse.de>2014-10-15 09:11:45 +0000
committerTatsuya Kinoshita <tats@debian.org>2014-10-15 09:11:45 +0000
commit05503271dfd26b843589dece0da35ba5d7d38654 (patch)
tree26cf6a6aa1ccbe8fc3dcb4bc572b6ffd69d5d22c
parentMerge from upstream on 2012-05-22 (diff)
downloadw3m-05503271dfd26b843589dece0da35ba5d7d38654.tar.gz
w3m-05503271dfd26b843589dece0da35ba5d7d38654.zip
Force ssl_verify_server on and disable SSLv2 support
Origin: http://www.openwall.com/lists/oss-security/2010/06/14/4
Diffstat (limited to '')
-rw-r--r--fm.h4
1 files changed, 2 insertions, 2 deletions
diff --git a/fm.h b/fm.h
index 8378939..9810c31 100644
--- a/fm.h
+++ b/fm.h
@@ -1135,7 +1135,7 @@ global int view_unseenobject init(TRUE);
#endif
#if defined(USE_SSL) && defined(USE_SSL_VERIFY)
-global int ssl_verify_server init(FALSE);
+global int ssl_verify_server init(TRUE);
global char *ssl_cert_file init(NULL);
global char *ssl_key_file init(NULL);
global char *ssl_ca_path init(NULL);
@@ -1144,7 +1144,7 @@ global int ssl_path_modified init(FALSE);
#endif /* defined(USE_SSL) &&
* defined(USE_SSL_VERIFY) */
#ifdef USE_SSL
-global char *ssl_forbid_method init(NULL);
+global char *ssl_forbid_method init("2");
#endif
global int is_redisplay init(FALSE);