sslutils: Check if OpenSSL supports SSLv3.

1 files changed, 5 insertions, 0 deletions

diff --git a/plugins/sslutils.c b/plugins/sslutils.c
index d0ae474..4933dd0 100644
--- a/plugins/sslutils.c
+++ b/plugins/sslutils.c
@@ -66,7 +66,12 @@ int np_net_ssl_init_with_hostname_version_and_cert(int sd, char *host_name, int
 #endif
                 break;
         case 3: /* SSLv3 protocol */
+#if defined(OPENSSL_NO_SSL3)
+                printf(("%s\n", _("CRITICAL - SSL protocol version 3 is not supported by your SSL library.")));
+                return STATE_CRITICAL;
+#else
                 method = SSLv3_client_method();
+#endif
                 break;
         default: /* Unsupported */
                 printf("%s\n", _("CRITICAL - Unsupported SSL protocol version."));