[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#803946: m2crypto: SSLv3 method



On Sun, 15 Nov 2015 22:30:52 +0100 Kurt Roeckx <kurt@roeckx.be> wrote:
> Hi,
> 
> So you currently have:
> #ifndef OPENSSL_NO_SSL2
> %rename(sslv2_method) SSLv2_method;
> extern SSL_METHOD *SSLv2_method(void);
> #endif
> %rename(sslv3_method) SSLv3_method;
> extern SSL_METHOD *SSLv3_method(void);
> %rename(sslv23_method) SSLv23_method;
> extern SSL_METHOD *SSLv23_method(void);
> %rename(tlsv1_method) TLSv1_method;
> extern SSL_METHOD *TLSv1_method(void);
> 
> You need to atleast do the same for the SSLv3 methods.
> 
> I also recommend to remove everything but the SSLv23_method().
> It's the only one that supports multiple protocol versions, the
> others are all version specific.
> 
> Kurt

Thanks for the pointer, Kurt! I'm going into the further suggested point soon, and
there are also some other bug reports to take care of, but I've got an "ITA" package
ready now which closes this RC bug.

DS

-- 
4096R/DF5182C8
46CB 1CA8 9EA3 B743 7676 1DB9 15E0 9AF4 DF51 82C8
LPI certified Linux admin (LPI000329859 64mz6f7kt4)
http://www.danielstender.com/blog/


Reply to: