Use of SSLv2, v3 and v23

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Nanang,

On Jul 7, 2011, at 11:28 AM, Nanang Izzuddin wrote:

> Hi Saul,
> 
> Just created ticket #1321 and committed your patch (only the
> OPENSSL_NO_SSL2 check parts) into SVN. I took liberty to strip the
> TLSv1 and SSLv23 swap in init_openssl() patch, as the SSLv23 there is
> just for listing the available ciphers.
> 

Great, thanks for including it!

> Just FYI, this issue doesn't seem to occur on some OpenSSL (binary)
> distributions, e.g: 1.0.0d for win32 from
> http://www.openssl.org/related/binaries.html.
> 

Yeah, I guessed that not everyone provides OpenSSL builds without SSLv2, but Debian does, that's why I discovered it :-)


Regards,

--
Sa?l Ibarra Corretg?
AG Projects






[Index of Archives]     [Asterisk Users]     [Asterisk App Development]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [Linux API]
  Powered by Linux