Is there a way to disable SSLv2 for HTTPS requests in pound? Pound is
using SSLv23_server_method() to create a new SSL_CTX object, but I don't
see any other calls to disable SSLv2.
In apache, I can specify the following options to allow SSLv3 and TSLv1
only:
SSLProtocol -ALL +SSLv3 +TLSv1
If pound doesn't support something similar, can it be added?
|