# HG changeset patch # User Igor Sysoev # Date 1291634223 0 # Node ID c6a5bae994f605acdeb2bf03f5efc47b20927e6f # Parent e6e453203baef44df2d1914409bff1993ff632ed remove SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG becuase of CVE-2010-4180 diff -r e6e453203bae -r c6a5bae994f6 src/event/ngx_event_openssl.c --- a/src/event/ngx_event_openssl.c Mon Dec 06 11:11:05 2010 +0000 +++ b/src/event/ngx_event_openssl.c Mon Dec 06 11:17:03 2010 +0000 @@ -155,7 +155,6 @@ SSL_CTX_set_options(ssl->ctx, SSL_OP_MICROSOFT_SESS_ID_BUG); SSL_CTX_set_options(ssl->ctx, SSL_OP_NETSCAPE_CHALLENGE_BUG); - SSL_CTX_set_options(ssl->ctx, SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG); /* server side options */