[icinga-checkins] icinga.org: icinga2/support/2.0: Add some missing SSL flags

[git at icinga.org]

Module: icinga2
Branch: support/2.0
Commit: 61ba2e647e4b3057866a59b1edcd3c6112ef3698
URL:    https://git.icinga.org/?p=icinga2.git;a=commit;h=61ba2e647e4b3057866a59b1edcd3c6112ef3698

Author: Gunnar Beutner <gunnar.beutner at netways.de>
Date:   Mon Jun 30 15:43:35 2014 +0200

Add some missing SSL flags

refs #6368

---

 lib/base/tlsutility.cpp |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/base/tlsutility.cpp b/lib/base/tlsutility.cpp
index d218974..0d0dd76 100644
--- a/lib/base/tlsutility.cpp
+++ b/lib/base/tlsutility.cpp
@@ -66,7 +66,7 @@ shared_ptr<SSL_CTX> MakeSSLContext(const String& pubkey, const String& privkey,
 
 	shared_ptr<SSL_CTX> sslContext = shared_ptr<SSL_CTX>(SSL_CTX_new(TLSv1_method()), SSL_CTX_free);
 
-	SSL_CTX_set_mode(sslContext.get(), 0);
+	SSL_CTX_set_mode(sslContext.get(), SSL_MODE_ENABLE_PARTIAL_WRITE | SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER | SSL_MODE_AUTO_RETRY);
 
 	if (!SSL_CTX_use_certificate_chain_file(sslContext.get(), pubkey.CStr())) {
 		BOOST_THROW_EXCEPTION(openssl_error()