a1fb602
diff -up openssl-1.0.2a/ssl/ssl_lib.c.v2v3 openssl-1.0.2a/ssl/ssl_lib.c
a1fb602
--- openssl-1.0.2a/ssl/ssl_lib.c.v2v3	2015-04-22 15:37:15.974345757 +0200
a1fb602
+++ openssl-1.0.2a/ssl/ssl_lib.c	2015-04-22 15:39:39.114782365 +0200
a1fb602
@@ -2048,6 +2048,9 @@ SSL_CTX *SSL_CTX_new(const SSL_METHOD *m
a1fb602
      */
a1fb602
     ret->options |= SSL_OP_LEGACY_SERVER_CONNECT;
a1fb602
 
a1fb602
+    /* Disable SSLv2 and SSLv3 by default (affects the SSLv23_method() only) */
a1fb602
+    ret->options |= SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3;
a1fb602
+
a1fb602
     return (ret);
a1fb602
  err:
a1fb602
     SSLerr(SSL_F_SSL_CTX_NEW, ERR_R_MALLOC_FAILURE);