ok? Index: src/modules/ssl/ssl_engine_init.c =================================================================== RCS file: /cvs/src/usr.sbin/httpd/src/modules/ssl/ssl_engine_init.c,v retrieving revision 1.27 diff -u -p -r1.27 ssl_engine_init.c --- src/modules/ssl/ssl_engine_init.c 9 Feb 2005 12:13:10 -0000 1.27 +++ src/modules/ssl/ssl_engine_init.c 7 Jul 2012 16:26:58 -0000 @@ -581,10 +581,7 @@ void ssl_init_ConfigureServer(server_rec cp[strlen(cp)-2] = NUL; ssl_log(s, SSL_LOG_TRACE, "Init: (%s) Creating new SSL context (protocols: %s)", cpVHostID, cp); - if (sc->nProtocol == SSL_PROTOCOL_SSLV2) - ctx = SSL_CTX_new(SSLv2_server_method()); /* only SSLv2 is left */ - else - ctx = SSL_CTX_new(SSLv23_server_method()); /* be more flexible */ + ctx = SSL_CTX_new(SSLv23_server_method()); SSL_CTX_set_options(ctx, SSL_OP_ALL); if (!(sc->nProtocol & SSL_PROTOCOL_SSLV2)) SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv2);