Disables the insecure SSLv2 protocol. Closes #3192.

diff --git a/init.h b/init.h
index b60192fbdcd5e5b09f2fed5cece9b77ee85a8437..2975b8a0adde00015f1624f78073232c2dfeb76b 100644 (file)
--- a/init.h
+++ b/init.h
@@ -2917,7 +2917,7 @@ struct option_t MuttVars[] = {
   ** use \fCSTARTTLS\fP regardless of the server's capabilities.
   */
 # ifdef USE_SSL_OPENSSL
-  { "ssl_use_sslv2", DT_BOOL, R_NONE, OPTSSLV2, 1 },
+  { "ssl_use_sslv2", DT_BOOL, R_NONE, OPTSSLV2, 0 },
   /*
   ** .pp
   ** This variable specifies whether to attempt to use SSLv2 in the