diff options
| author | Reyk Floeter <reyk@cvs.openbsd.org> | 2014-10-15 11:06:17 +0000 |
|---|---|---|
| committer | Reyk Floeter <reyk@cvs.openbsd.org> | 2014-10-15 11:06:17 +0000 |
| commit | 74d02ae20fac0fb6a6187064848a292ba37ad83e (patch) | |
| tree | 5ab400070bfc8b4998aa7137b09b8ec292c62684 /usr.sbin/relayd/parse.y | |
| parent | e221c748f78d80d41bd11b0dea188f6a49b17cd6 (diff) | |
Disable SSLv3 by default.
OK sthen@ jsing@
Diffstat (limited to 'usr.sbin/relayd/parse.y')
| -rw-r--r-- | usr.sbin/relayd/parse.y | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/usr.sbin/relayd/parse.y b/usr.sbin/relayd/parse.y index 5e7aa64ce32..a08b8b829e9 100644 --- a/usr.sbin/relayd/parse.y +++ b/usr.sbin/relayd/parse.y @@ -1,4 +1,4 @@ -/* $OpenBSD: parse.y,v 1.189 2014/09/05 10:19:26 blambert Exp $ */ +/* $OpenBSD: parse.y,v 1.190 2014/10/15 11:06:16 reyk Exp $ */ /* * Copyright (c) 2007 - 2014 Reyk Floeter <reyk@openbsd.org> @@ -1065,6 +1065,12 @@ flag : STRING { $$ = SSLFLAG_SSLV3; else if (strcmp("tlsv1", $1) == 0) $$ = SSLFLAG_TLSV1; + else if (strcmp("tlsv1.0", $1) == 0) + $$ = SSLFLAG_TLSV1_0; + else if (strcmp("tlsv1.1", $1) == 0) + $$ = SSLFLAG_TLSV1_1; + else if (strcmp("tlsv1.2", $1) == 0) + $$ = SSLFLAG_TLSV1_2; else if (strcmp("cipher-server-preference", $1) == 0) $$ = SSLFLAG_CIPHER_SERVER_PREF; else if (strcmp("client-renegotiation", $1) == 0) |