diff -ur postgresql-7.3.1/src/backend/libpq/be-secure.c postgresql-7.3.1.patched/src/backend/libpq/be-secure.c --- postgresql-7.3.1/src/backend/libpq/be-secure.c Wed Dec 18 07:20:00 2002 +++ postgresql-7.3.1.patched/src/backend/libpq/be-secure.c Mon Dec 23 00:54:44 2002 @@ -635,7 +639,7 @@ /* set up empheral DH keys */ SSL_CTX_set_tmp_dh_callback(SSL_context, tmp_dh_cb); - SSL_CTX_set_options(SSL_context, SSL_OP_SINGLE_DH_USE); + SSL_CTX_set_options(SSL_context, SSL_OP_SINGLE_DH_USE | SSL_OP_NO_SSLv2); /* accept client certificates, but don't require them. */ snprintf(fnbuf, sizeof fnbuf, "%s/root.crt", DataDir);