New option to enable/disable connection to unpatched servers

2009-12-16 20:34:20 +00:00
parent 593a6dbe19
commit ccc3df8c33
6 changed files with 24 additions and 3 deletions
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -1591,6 +1591,10 @@ SSL_CTX *SSL_CTX_new(SSL_METHOD *meth)
 	}
 #endif
 #endif
+	/* Default is to connect to non-RI servers. When RI is more widely
+	 * deployed might change this.
+	 */
+	ret->options = SSL_OP_LEGACY_SERVER_CONNECT;

 	return(ret);
 err: