Source: sslsplit
Version: 0.4.11+dfsg-1
Severity: serious
Control: block 797926 by -1

Hi,

The SSLv3 method has been disabled in Debian so your package now
fails to build.  You have this code:
#ifdef SSL_OP_NO_SSLv3
        if (!strcmp(optarg, "ssl3")) {
                opts->sslmethod = SSLv3_method;
        } else
#endif /* SSL_OP_NO_SSLv3 */

I suggest you replace that by OPENSSL_NO_SSL3 (or
OPENSSL_NO_SSL3_METHOD).  The SSL_OP_NO_SSLv3 actually still
exists for backwards compatibility.

I'm not sure why you don't just always use the SSLv23_method.  I
suggest you use things like SSL_OP_NO_SSLv3 to disable protocol
version instead.


Kurt

Reply via email to