From owner-svn-src-all@FreeBSD.ORG  Mon Mar 23 18:09:17 2015
Return-Path: <owner-svn-src-all@FreeBSD.ORG>
Delivered-To: svn-src-all@freebsd.org
Received: from mx2.freebsd.org (mx2.freebsd.org [8.8.178.116])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 109B4E86;
 Mon, 23 Mar 2015 18:09:17 +0000 (UTC)
Received: from hammer.pct.niksun.com (freefall.freebsd.org
 [IPv6:2001:1900:2254:206c::16:87])
 by mx2.freebsd.org (Postfix) with ESMTP id 9F31E1A84;
 Mon, 23 Mar 2015 18:09:16 +0000 (UTC)
Message-ID: <551056CC.10903@FreeBSD.org>
Date: Mon, 23 Mar 2015 14:09:16 -0400
From: Jung-uk Kim <jkim@FreeBSD.org>
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64;
 rv:31.0) Gecko/20100101 Thunderbird/31.5.0
MIME-Version: 1.0
To: "Philip M. Gollucci" <pgollucci@p6m7g8.com>
Subject: Re: svn commit: r280306 - in head: secure/lib/libcrypto
 secure/lib/libssl sys/sys
References: <201503202348.t2KNmCM0033402@svn.freebsd.org>
 <CACM2dAaREzFt1LfF9YRYsO7nJ0Uv7Bckt_Epgb=Vj9R0VfZikQ@mail.gmail.com>
In-Reply-To: <CACM2dAaREzFt1LfF9YRYsO7nJ0Uv7Bckt_Epgb=Vj9R0VfZikQ@mail.gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Cc: svn-src-head@freebsd.org, svn-src-all@freebsd.org,
 src-committers@freebsd.org
X-BeenThere: svn-src-all@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: "SVN commit messages for the entire src tree \(except for &quot;
 user&quot; and &quot; projects&quot; \)" <svn-src-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/svn-src-all>,
 <mailto:svn-src-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/svn-src-all/>
List-Post: <mailto:svn-src-all@freebsd.org>
List-Help: <mailto:svn-src-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/svn-src-all>,
 <mailto:svn-src-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Mar 2015 18:09:17 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 03/23/2015 11:35, Philip M. Gollucci wrote:
> What about SSLv3 due to POODLE ?

IMHO, it is too early to remove SSLv3 support because it is still
widely used although there are known vulnerabilities.  Please use
OpenSSL from ports, i.e., security/openssl, i.e., turn off both SSL2
and SSL3 options and compile all ports with it.

Jung-uk Kim
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJVEFbGAAoJEHyflib82/FGtH0H/jEr8VI2EIh4T0qmOyaXbwEg
Aqz6sIO1AJe/PultpqEMSUWPKofHNH4YstOcaHQ421g22tcGjK3VgwhzSG97IPjH
vlSY3451DDw0FzQVD20N3c8B0tjnrM2QD9K+wULvE74W9Yu6woSgQN/kLqhGnuss
qPM3MemKNYq5euGnWVzXaY+IuDHFf8CFKanpymVFc378rV/M4tgXJbesNOX9Koiv
VC7tvfn7slsr/bHSqC6zdDNk5BkL3iaNGceHweMeIQ8HeTtglESVjjOnBMayxsYS
YKapEONNnhVh+Waq2jH0JylDIfotWMylvxFRLlW99oSPnvVHOMhsr+gEh6LxZGQ=
=a8q9
-----END PGP SIGNATURE-----