OR default SSL_OP_LEGACY_SERVER_CONNECT so existing options are preserved

diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c
index 231f87b30740f16cc42e8d38e737b859e70b5ab3..15650da5e7206cfd3fb0b6d86184aa74ed24fffb 100644 (file)
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -1601,7 +1601,7 @@ SSL_CTX *SSL_CTX_new(SSL_METHOD *meth)
        /* Default is to connect to non-RI servers. When RI is more widely
         * deployed might change this.
         */
-       ret->options = SSL_OP_LEGACY_SERVER_CONNECT;
+       ret->options |= SSL_OP_LEGACY_SERVER_CONNECT;
 
        return(ret);
 err: