always set SSL_OP_NO_SSLv2 in TLS options

8 years ago · 8f747e37ca
parent 47124df4ed
commit 8f747e37ca
1 changed files with 1 additions and 4 deletions
--- a/common/ssl_calls.c
+++ b/common/ssl_calls.c
@ -601,14 +601,11 @@ ssl_tls_accept(struct ssl_tls *self, int disableSSLv3,
     * SSLv3 is used by, eg. Microsoft RDC for Mac OS X.
     * No SSLv3 if disableSSLv3=yes so only tls used
     */
+    options |= SSL_OP_NO_SSLv2;
    if (disableSSLv3)
    {
        options |= SSL_OP_NO_SSLv3;
    }
-    else
-    {
-        options |= SSL_OP_NO_SSLv2;
-    }

 #if defined(SSL_OP_NO_COMPRESSION)
    /**