Use boost::asio::ssl::context::sslv23 for backwards compatibility

All the insecure protocols that this enables are then disabled, so they
cannot be actually used. The end-result is the same.
pull/241/head
Martijn Otto 4 years ago
parent 3031debfd6
commit 6079042cce
No known key found for this signature in database
GPG Key ID: D2E0D5D0B1D606F9

@ -289,7 +289,9 @@ ssl_options_t::ssl_options_t(std::vector<std::vector<std::uint8_t>> fingerprints
boost::asio::ssl::context ssl_options_t::create_context() const
{
boost::asio::ssl::context ssl_context{boost::asio::ssl::context::tls};
// note: this enables a lot of old and insecure protocols, which we
// promptly disable below - if the result is actually used
boost::asio::ssl::context ssl_context{boost::asio::ssl::context::sslv23};
if (!bool(*this))
return ssl_context;

Loading…
Cancel
Save