[Pkg-openssl-devel] Bug#765565: openssl: don't completely disable ssl3/2 but rather just don't use it

Jakub Wilk jwilk at debian.org
Thu Oct 16 10:27:13 UTC 2014


* Christoph Anton Mitterer <calestyo at scientia.net>, 2014-10-16, 11:47:
>But AFAICS, it's completely gone, i.e. one cannot even intentionally 
>enable it.
>I mainly have s_client in my mind in order to allow testing.

As a data point, I've been using "openssl s_server -ssl3" in a test 
suite of my TLS client, to make sure that the client fails to connect to 
such server. I wouldn't mind if "-ssl2" worked either.

NB, both of these options are still documented in "openssl s_server 
--help".

-- 
Jakub Wilk



More information about the Pkg-openssl-devel mailing list