Bug#767663: openssl: completly drop SSLv3 support in jessie

[Emilio Pozuelo Monfort <pochu@debian.org>]

On 08/11/14 18:55, Kurt Roeckx wrote:
> On Sat, Nov 08, 2014 at 03:38:35PM +0000, Julien Cristau wrote:
> > On Sat, Nov  1, 2014 at 20:21:21 +0100, Kurt Roeckx wrote:
> >
> > > Package: release.debian.org
> > > Severity: normal
> > >
> > > Hi,
> > >
> > > SSLv3 has been disabled in jessie already, at least for normal
> > > usage.  But there is a way to explictly create a socket that only
> > > support SSLv3 and I would like to disable that too.
> > No, it's much too late for this, sorry.
>
> Will you accept patches for other packages that stop using the
> SSLv3 methods?

If the changes are sensible (e.g. not too invasive), sure. We'll consider that 
in a case-by-case basis.

Cheers,
Emilio