New option to enable/disable connection to unpatched servers

2009-12-16 20:25:59 +00:00
parent c27c9cb4f7
commit ef51b4b9b4
6 changed files with 24 additions and 3 deletions
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -1677,6 +1677,10 @@ SSL_CTX *SSL_CTX_new(const SSL_METHOD *meth)
 	}
 #endif
 #endif
+	/* Default is to connect to non-RI servers. When RI is more widely
+	 * deployed might change this.
+	 */
+	ret->options = SSL_OP_LEGACY_SERVER_CONNECT;

 	return(ret);
 err: