net.http: Disable SSLv2 support for HTTPS connections

This commit is contained in:
Matthew Wild 2013-03-20 20:31:52 +00:00
parent 375e615103
commit 0c46e400af

View file

@ -190,7 +190,7 @@ function request(u, ex, callback)
local sslctx = false;
if using_https then
sslctx = ex and ex.sslctx or { mode = "client", protocol = "sslv23" };
sslctx = ex and ex.sslctx or { mode = "client", protocol = "sslv23", options = { "no_sslv2" } };
end
req.handler, req.conn = server.wrapclient(conn, req.host, port, listener, "*a", sslctx);