[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#767663: openssl: completly drop SSLv3 support in jessie



On Sat, Nov 08, 2014 at 03:38:35PM +0000, Julien Cristau wrote:
> On Sat, Nov  1, 2014 at 20:21:21 +0100, Kurt Roeckx wrote:
> 
> > Package: release.debian.org
> > Severity: normal
> > 
> > Hi,
> > 
> > SSLv3 has been disabled in jessie already, at least for normal
> > usage.  But there is a way to explictly create a socket that only
> > support SSLv3 and I would like to disable that too.
> > 
> No, it's much too late for this, sorry.

Will you accept patches for other packages that stop using the
SSLv3 methods?


Kurt


Reply to: