Bug#737969: libtcnative-1 breaks Tomcat's 'SSLProtocols'

Emmanuel Bourg ebourg at apache.org
Sat Mar 14 00:04:58 UTC 2015


Thank you for the feedbak Sergio. You are right, disabling the SSLv23_*
calls was a mistake, I'll fix that. Since this is a different issue I'll
clone this report though.

I also agree that the whole patch is no longer necessary. It was
initially required to avoid a warning caused by the removal of the SSLv2
functions in OpenSSL (#622141). But upstream has now caught up and
guarded the SSLv2 calls with a #ifndef OPENSSL_NO_SSL2 directive, so the
warnings no longer occur. The hunks related to the examples are not
critical, and the hunks related to SSL_CTX_set_options are useless.

I'll try to get the SSLv23 issue fixed in Jessie, and I'll then remove
the patch in Jessie+1.

Emmanuel Bourg



More information about the pkg-java-maintainers mailing list