Skip to content

Commit 3495d31

Browse files
author
Brent Cook
committed
Do not lock SMTP STARTTLS to only use SSLv3
SSLv3 has been deprecated for some time, and is being actively disabled more and more (http://disablessl3.com, https://tools.ietf.org/html/rfc7568). To maintain forward compatibility, do not specify a maximum version and insteady use the default from the local OpenSSL library instead. Fallbacks to older versions will happen on handshake as needed.
1 parent 768dca5 commit 3495d31

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

lib/msf/core/exploit/smtp_deliver.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -229,7 +229,7 @@ def swap_sock_plain_to_ssl(nsock=self.sock)
229229
end
230230

231231
def generate_ssl_context
232-
ctx = OpenSSL::SSL::SSLContext.new(:SSLv3)
232+
ctx = OpenSSL::SSL::SSLContext.new
233233
ctx.key = OpenSSL::PKey::RSA.new(1024){ }
234234

235235
ctx.session_id_context = Rex::Text.rand_text(16)

0 commit comments

Comments
 (0)