Skip to content

Instantly share code, notes, and snippets.

@holysugar
Created October 16, 2014 09:56
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save holysugar/90147c3482d7d2bd2b99 to your computer and use it in GitHub Desktop.
Save holysugar/90147c3482d7d2bd2b99 to your computer and use it in GitHub Desktop.
ngircd patch for POODLE
--- conn-ssl.c.orig 2014-10-16 09:37:47.303936573 +0000
+++ conn-ssl.c 2014-10-16 09:38:31.513421919 +0000
@@ -296,7 +296,7 @@
return false;
}
- newctx = SSL_CTX_new(SSLv23_method());
+ newctx = SSL_CTX_new(TLSv1_method());
if (!newctx) {
LogOpenSSLError("Failed to create SSL context", NULL);
array_free(&Conf_SSLOptions.ListenPorts);
@@ -312,7 +312,7 @@
goto out;
}
- SSL_CTX_set_options(newctx, SSL_OP_SINGLE_DH_USE|SSL_OP_NO_SSLv2);
+ SSL_CTX_set_options(newctx, SSL_OP_SINGLE_DH_USE|SSL_OP_NO_SSLv2|SSL_OP_NO_SSLv3);
SSL_CTX_set_mode(newctx, SSL_MODE_ENABLE_PARTIAL_WRITE);
SSL_CTX_set_verify(newctx, SSL_VERIFY_PEER|SSL_VERIFY_CLIENT_ONCE,
Verify_openssl);
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment