Re: SSL 3.0 and older ciphers selected in applications
On Mon, Dec 08, 2014 at 08:17:53PM +0100, Daniel Pocock wrote:
>
> If I understand your reply correctly, the version in Ubuntu and Fedora
> will still talk TLS 1.0 with the version now waiting in jessie?
Yes.
> Do you believe it would be reasonable for me to request a smaller
> unblock that just changes the call TLSv1_method to SSLv23_method?
That depends on wether it's acting as client or server. If it's
acting as server I say yes. If it's acting as client I suggest
you also have a way to turn off TLS 1.2. I understand that it
needs to be able to talk to many different things and TLS 1.2 has
has been breaking things it shouldn't and you already indicated
problems with some products. But maybe it just needs to be used
for a while with the SSLv23 method to see if there are problems or
not.
Kurt
Reply to: