diff options
| author | jkim <jkim@FreeBSD.org> | 2016-03-04 00:40:15 +0000 |
|---|---|---|
| committer | jkim <jkim@FreeBSD.org> | 2016-03-04 00:40:15 +0000 |
| commit | 86f5b30ace5c71d6d7ced267579015122d0165cd (patch) | |
| tree | 6b303f77e9e0621af7fd9d7fb9def646ff4264ad /release | |
| parent | a80787b3cf391d64d553b56692582daf4b07b78f (diff) | |
| download | FreeBSD-src-86f5b30ace5c71d6d7ced267579015122d0165cd.zip FreeBSD-src-86f5b30ace5c71d6d7ced267579015122d0165cd.tar.gz | |
Re-enable SSLv2 support to restore ABI.
Excerpt from CHANGES:
Even if "enable-ssl2" is used, users who want to negotiate SSLv2 via
the version-flexible SSLv23_method() will need to explicitly call
either of:
SSL_CTX_clear_options(ctx, SSL_OP_NO_SSLv2);
or
SSL_clear_options(ssl, SSL_OP_NO_SSLv2);
as appropriate. Even if either of those is used, or the application
explicitly uses the version-specific SSLv2_method() or its client and
server variants, SSLv2 ciphers vulnerable to exhaustive search key
recovery have been removed. Specifically, the SSLv2 40-bit EXPORT
ciphers, and SSLv2 56-bit DES are no longer available.
Approved by: re (marius, gjb), so (delphij)
Diffstat (limited to 'release')
0 files changed, 0 insertions, 0 deletions
