From 4e786f83decca053c98293fc4a4a555e4d247c1a Mon Sep 17 00:00:00 2001 From: Jérémie Courrèges-Anglas Date: Sat, 25 Jul 2015 20:02:14 -0600 Subject: sslutils: Check if OpenSSL supports SSLv3. --- plugins/sslutils.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/plugins/sslutils.c b/plugins/sslutils.c index d0ae4741..4933dd0d 100644 --- a/plugins/sslutils.c +++ b/plugins/sslutils.c @@ -66,7 +66,12 @@ int np_net_ssl_init_with_hostname_version_and_cert(int sd, char *host_name, int #endif break; case 3: /* SSLv3 protocol */ +#if defined(OPENSSL_NO_SSL3) + printf(("%s\n", _("CRITICAL - SSL protocol version 3 is not supported by your SSL library."))); + return STATE_CRITICAL; +#else method = SSLv3_client_method(); +#endif break; default: /* Unsupported */ printf("%s\n", _("CRITICAL - Unsupported SSL protocol version.")); -- cgit v1.2.3-74-g34f1