projects / platform / upstream / nodejs.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 635337f) | patch
build,src: remove sslv3 support
authorBen Noordhuis <info@bnoordhuis.nl>
Mon, 12 Jan 2015 23:45:31 +0000 (00:45 +0100)
committerBen Noordhuis <info@bnoordhuis.nl>
Tue, 13 Jan 2015 00:59:30 +0000 (01:59 +0100)
commit5165d71048a0cc20c319fcd62ac4c50465ff0414
treece05b41dab1258a2f83c7427d5125560d14029fatree | snapshot
parent635337f953aac7ae26d1c19630e7f940dbfc3120commit | diff
build,src: remove sslv3 support

SSLv3 is susceptible to downgrade attacks.  Provide secure defaults,
disable v3 protocol support entirely.

PR-URL: https://github.com/iojs/io.js/pull/315
Reviewed-By: Fedor Indutny <fedor@indutny.com>
Reviewed-By: Trevor Norris <trev.norris@gmail.com>
deps/openssl/openssl.gyp diff | blob | history
src/node_crypto.cc diff | blob | history
src/node_crypto_clienthello.cc diff | blob | history
test/parallel/test-tls-no-sslv23.js [new file with mode: 0644] blob
test/parallel/test-tls-no-sslv3.js [new file with mode: 0644] blob
Domain: Web Framework / Common;