Do not lock SMTP STARTTLS to only use SSLv3

SSLv3 has been deprecated for some time, and is being actively disabled more
and more (http://disablessl3.com, https://tools.ietf.org/html/rfc7568).

To maintain forward compatibility, do not specify a maximum version
and insteady use the default from the local OpenSSL library instead. Fallbacks
to older versions will happen on handshake as needed.
bug/bundler_fix
Brent Cook 2015-07-10 11:17:31 -05:00
parent 768dca514a
commit 3495d317b5
1 changed files with 1 additions and 1 deletions

View File

@ -229,7 +229,7 @@ protected
end
def generate_ssl_context
ctx = OpenSSL::SSL::SSLContext.new(:SSLv3)
ctx = OpenSSL::SSL::SSLContext.new
ctx.key = OpenSSL::PKey::RSA.new(1024){ }
ctx.session_id_context = Rex::Text.rand_text(16)