mirrors/FreeRDP
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #4417 from ondrejholy/tls1+

Browse Source 
tls: enable tls 1+
This commit is contained in:
Bernhard Miklautz 2018-02-13 15:20:49 +01:00 committed by GitHub
commit 079678bf61
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
libfreerdp-core/tls.c
View File

@ -25,8 +25,9 @@
boolean tls_connect(rdpTls* tls) boolean tls_connect(rdpTls* tls)
{ {
int connection_status; int connection_status;
int options = 0;
tls->ctx = SSL_CTX_new(TLSv1_client_method()); tls->ctx = SSL_CTX_new(SSLv23_client_method());
if (tls->ctx == NULL) if (tls->ctx == NULL)
{ {
@ -42,7 +43,15 @@ boolean tls_connect(rdpTls* tls)
* block padding is normally used, but the Microsoft TLS implementation * block padding is normally used, but the Microsoft TLS implementation
* won't recognize it and will disconnect you after sending a TLS alert. * won't recognize it and will disconnect you after sending a TLS alert.
*/ */
SSL_CTX_set_options(tls->ctx, SSL_OP_ALL); options |= SSL_OP_ALL;
/**
* disable SSLv2 and SSLv3
*/
options |= SSL_OP_NO_SSLv2;
options |= SSL_OP_NO_SSLv3;
SSL_CTX_set_options(tls->ctx, options);
tls->ssl = SSL_new(tls->ctx); tls->ssl = SSL_new(tls->ctx);