> For example, what if SSLv2_client_method() returns non-NULL but SSLv2 was > disabled in some other way by a distribution.
Well then you're hosed. Distro's will do what they want, and there's nothing we can do about it. Do you have a real-world use-case for SSLv2? The use we see is negligible (well under 1%)
