For SSLv2, return the SSLv2 method, not the SSLv23 method. This way,

it's possible to reuse an SSLv2 session.

diff --git a/ssl/s23_meth.c b/ssl/s23_meth.c
index b52ca1d58b3f2763c51bd1cb12ba1109487c7482..40684311db30e3421ba39fcf4f8e4a6d3986e989 100644 (file)
--- a/ssl/s23_meth.c
+++ b/ssl/s23_meth.c
@@ -64,7 +64,7 @@ static SSL_METHOD *ssl23_get_method(int ver);
 static SSL_METHOD *ssl23_get_method(int ver)
        {
        if (ver == SSL2_VERSION)
-               return(SSLv23_method());
+               return(SSLv2_method());
        else if (ver == SSL3_VERSION)
                return(SSLv3_method());
        else if (ver == TLS1_VERSION)