OR default SSL_OP_LEGACY_SERVER_CONNECT so existing options are preserved

diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c
index b72a97064834cd79c860bbacb1fd269364cec50f..3157f20eac6d68e72824a572b3c437918b021efb 100644 (file)
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -1687,7 +1687,7 @@ SSL_CTX *SSL_CTX_new(const SSL_METHOD *meth)
        /* Default is to connect to non-RI servers. When RI is more widely
         * deployed might change this.
         */
-       ret->options = SSL_OP_LEGACY_SERVER_CONNECT;
+       ret->options |= SSL_OP_LEGACY_SERVER_CONNECT;
 
        return(ret);
 err: