Index: src/http_ssl.c
==================================================================
--- src/http_ssl.c
+++ src/http_ssl.c
@@ -99,12 +99,12 @@
     SSL_library_init();
     SSL_load_error_strings();
     ERR_load_BIO_strings();
     OpenSSL_add_all_algorithms();
     sslCtx = SSL_CTX_new(SSLv23_client_method());
-    /* Disable SSLv2 */
-    SSL_CTX_set_options(sslCtx, SSL_OP_NO_SSLv2);
+    /* Disable SSLv2 and SSLv3 */
+    SSL_CTX_set_options(sslCtx, SSL_OP_NO_SSLv2|SSL_OP_NO_SSLv3);
 
     /* Set up acceptable CA root certificates */
     zCaSetting = db_get("ssl-ca-location", 0);
     if( zCaSetting==0 || zCaSetting[0]=='\0' ){
       /* CA location not specified, use platform's default certificate store */

Index: src/makemake.tcl
==================================================================
--- src/makemake.tcl
+++ src/makemake.tcl
@@ -548,10 +548,11 @@
 SSLCONFIG = mingw64
 ZLIBCONFIG =
 LIBTARGETS =
 endif
 
+SSLCONFIG += no-ssl2 no-ssl3 no-shared
 ifndef FOSSIL_ENABLE_MINIZ
 SSLCONFIG +=  --with-zlib-lib=$(PWD)/$(ZLIBDIR) --with-zlib-include=$(PWD)/$(ZLIBDIR) zlib
 endif
 
 #### The directories where the OpenSSL include and library files are located.

Index: win/Makefile.mingw
==================================================================
--- win/Makefile.mingw
+++ win/Makefile.mingw
@@ -121,10 +121,11 @@
 SSLCONFIG = mingw64
 ZLIBCONFIG =
 LIBTARGETS =
 endif
 
+SSLCONFIG += no-ssl2 no-ssl3 no-shared
 ifndef FOSSIL_ENABLE_MINIZ
 SSLCONFIG +=  --with-zlib-lib=$(PWD)/$(ZLIBDIR) --with-zlib-include=$(PWD)/$(ZLIBDIR) zlib
 endif
 
 #### The directories where the OpenSSL include and library files are located.

Index: win/Makefile.mingw.mistachkin
==================================================================
--- win/Makefile.mingw.mistachkin
+++ win/Makefile.mingw.mistachkin
@@ -121,10 +121,11 @@
 SSLCONFIG = mingw64
 ZLIBCONFIG =
 LIBTARGETS =
 endif
 
+SSLCONFIG += no-ssl2 no-ssl3 no-shared
 ifndef FOSSIL_ENABLE_MINIZ
 SSLCONFIG +=  --with-zlib-lib=$(PWD)/$(ZLIBDIR) --with-zlib-include=$(PWD)/$(ZLIBDIR) zlib
 endif
 
 #### The directories where the OpenSSL include and library files are located.