MEDIUM: config: add "nosslv3" and "notlsv1" on bind and server lines
This is aimed at disabling SSLv3 and TLSv1 respectively. SSLv2 is always
disabled. This can be used in some situations where one version looks more
suitable than the other.
diff --git a/include/types/protocols.h b/include/types/protocols.h
index 4b4ef16..4e40a67 100644
--- a/include/types/protocols.h
+++ b/include/types/protocols.h
@@ -135,6 +135,8 @@
struct {
SSL_CTX *ctx;
char *ciphers; /* cipher suite to use if non-null */
+ int nosslv3; /* disable SSLv3 */
+ int notlsv1; /* disable TLSv1 */
} ssl_ctx;
#endif
/* warning: this struct is huge, keep it at the bottom */