1     This is an in-house patch that disables SSLv2 and SSLv3 protocol for

     2     slrn. This change was sent upstream and will be incorporated into the

     3     future release of version 1.0.3.

     4 

     5 diff -rupN slrn-0.9.9p1-orig/sltcp.c slrn-0.9.9p1/sltcp.c

     6 --- slrn-0.9.9p1-orig/src/sltcp.c	2015-06-04 12:45:59.330874707 -0700

     7 +++ slrn-0.9.9p1/src/sltcp.c	2015-06-04 12:46:38.175640243 -0700

     8 @@ -572,6 +572,7 @@ static SSL *alloc_ssl (void)

     9  	     print_error (_("SSL_CTX_new failed.\n"));

    10  	     return NULL;

    11  	  }

    12 +	SSL_CTX_set_options (c, SSL_OP_NO_SSLv2|SSL_OP_NO_SSLv3);

    13  	This_SSL_Ctx = c;

    14  	atexit (deinit_ssl);

    15