[tor-commits] [tor/maint-0.2.1] Log at info level when disabling SSLv3

[nickm@xxxxxxxxxxxxxx]

commit 4752b348793f599cbdc93d0503d18def03e45c7a
Author: Robert Ransom <rransom.8774@xxxxxxxxx>
Date:   Wed Jan 4 20:41:28 2012 -0800

    Log at info level when disabling SSLv3
---
 src/common/tortls.c |    6 ++++++
 1 files changed, 6 insertions(+), 0 deletions(-)

diff --git a/src/common/tortls.c b/src/common/tortls.c
index 22b0e31..d88a59b 100644
--- a/src/common/tortls.c
+++ b/src/common/tortls.c
@@ -771,6 +771,12 @@ tor_tls_context_new(crypto_pk_env_t *identity, unsigned int key_lifetime,
       (SSLeay() >= 0x00909000L &&
        SSLeay() <  0x1000006fL)) {
     /* And not SSL3 if it's subject to CVE-2011-4657. */
+    log_info(LD_NET, "Disabling SSLv3 because this OpenSSL version "
+             "might otherwise be vulnerable to CVE-2011-4657 "
+             "(compile-time version %08lx (%s); "
+             "runtime version %08lx (%s))",
+             OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT,
+             SSLeay(), SSLeay_version(SSLEAY_VERSION));
     SSL_CTX_set_options(result->ctx, SSL_OP_NO_SSLv3);
   }
 



_______________________________________________
tor-commits mailing list
tor-commits@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-commits