Date: Fri, 4 Mar 2016 18:03:39 +0300 From: Slawa Olhovchenkov <slw@zxy.spb.ru> To: Jung-uk Kim <jkim@FreeBSD.org> Cc: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-stable@freebsd.org, svn-src-stable-10@freebsd.org Subject: Re: svn commit: r296371 - stable/10/secure/lib/libcrypto Message-ID: <20160304150339.GB94639@zxy.spb.ru> In-Reply-To: <201603040040.u240eGeY044590@repo.freebsd.org> References: <201603040040.u240eGeY044590@repo.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Mar 04, 2016 at 12:40:16AM +0000, Jung-uk Kim wrote: > Author: jkim > Date: Fri Mar 4 00:40:15 2016 > New Revision: 296371 > URL: https://svnweb.freebsd.org/changeset/base/296371 > > Log: > Re-enable SSLv2 support to restore ABI. > > Excerpt from CHANGES: > > Even if "enable-ssl2" is used, users who want to negotiate SSLv2 via > the version-flexible SSLv23_method() will need to explicitly call > either of: > > SSL_CTX_clear_options(ctx, SSL_OP_NO_SSLv2); > or > SSL_clear_options(ssl, SSL_OP_NO_SSLv2); > > as appropriate. Even if either of those is used, or the application > explicitly uses the version-specific SSLv2_method() or its client and > server variants, SSLv2 ciphers vulnerable to exhaustive search key > recovery have been removed. Specifically, the SSLv2 40-bit EXPORT > ciphers, and SSLv2 56-bit DES are no longer available. > > Approved by: re (marius, gjb), so (delphij) > > Modified: > stable/10/secure/lib/libcrypto/opensslconf-arm.h > stable/10/secure/lib/libcrypto/opensslconf-ia64.h > stable/10/secure/lib/libcrypto/opensslconf-mips.h > stable/10/secure/lib/libcrypto/opensslconf-powerpc.h > stable/10/secure/lib/libcrypto/opensslconf-sparc64.h > stable/10/secure/lib/libcrypto/opensslconf-x86.h Need to re-mergered to 10.3 too?
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20160304150339.GB94639>