joyent/node — comment on commit be67fa7e095d47806983e126ef45639c7d9a2867
File:  line 0
By bnoordhuis:

Two things:

1. I don't consider this an API change but a bug fix. You cannot unset options with `SSL_CTX_set_options()` since it ORs the new options with the old.

2. It cannot have failed with 0.9.8k since I test with 0.9.8k (both stock and Ubuntu-ized).

I don't want to revert this, it's one part of a two-pronged attack on mitigating TLS renegotiation attacks. If some versions of openssl lack `SSL_CTX_clear_options()` (it was added in response to [CVE-2009-3555](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555)), I'd rather have a feature check than nothing at all.