Treat SSL 3.0 as a weak encryption method and change not to use it by default.

diff --git a/FFFTP_Eng_Release/FFFTP.exe b/FFFTP_Eng_Release/FFFTP.exe
index 837d173..c67341e 100644 (file)
Binary files a/FFFTP_Eng_Release/FFFTP.exe and b/FFFTP_Eng_Release/FFFTP.exe differ

diff --git a/Release/FFFTP.exe b/Release/FFFTP.exe
index 83b9e73..af25e22 100644 (file)
Binary files a/Release/FFFTP.exe and b/Release/FFFTP.exe differ

diff --git a/socketwrapper.c b/socketwrapper.c
index 88b58b7..f752045 100644 (file)
--- a/socketwrapper.c
+++ b/socketwrapper.c
@@ -705,7 +705,7 @@ BOOL AttachSSL(SOCKET s, SOCKET parent, BOOL* pbAborted, BOOL bStrengthen)
                                        {\r
                                                if(bStrengthen)\r
                                                {\r
-                                                       p_SSL_ctrl(*ppSSL, SSL_CTRL_OPTIONS, SSL_OP_NO_SSLv2, NULL);\r
+                                                       p_SSL_ctrl(*ppSSL, SSL_CTRL_OPTIONS, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3, NULL);\r
                                                        p_SSL_set_cipher_list(*ppSSL, "HIGH");\r
                                                }\r
                                        }\r