force SSL_OP_NO_SSLv2

diff --git a/ext/openssl/xp_ssl.c b/ext/openssl/xp_ssl.c
index c381e3dd37c931cb312f116da336ecc6131cc833..edc1c17ab3ce545241717b14260cc299dc6b7965 100644 (file)
--- a/ext/openssl/xp_ssl.c
+++ b/ext/openssl/xp_ssl.c
@@ -991,6 +991,9 @@ static int php_get_crypto_method_ctx_flags(int method_flags) /* {{{ */
 {
        int ssl_ctx_options = SSL_OP_ALL;
 
+#ifdef SSL_OP_NO_SSLv2
+       ssl_ctx_options |= SSL_OP_NO_SSLv2;
+#endif
 #ifdef HAVE_SSL3
        if (!(method_flags & STREAM_CRYPTO_METHOD_SSLv3)) {
                ssl_ctx_options |= SSL_OP_NO_SSLv3;