Re: openssl without ssl2 switch

2014-03-26 Thread Brian
On Wed 26 Mar 2014 at 14:21:38 +0100, Veljko wrote: > On 2014-Mar-26 13:13, Brian wrote: > > > > The Squeeze libssl and openssl *do* install on Wheezy with 'dpkg -i' and > > the command to test for ssl2 works. > > Thanks for the info, Brian. Can they be installed side by side with > wheezy vers

Re: openssl without ssl2 switch

2014-03-26 Thread Veljko
On 2014-Mar-26 13:13, Brian wrote: > On Wed 26 Mar 2014 at 11:59:21 +0100, Veljko wrote: > > > ssllabs works only with 443 port, but thanks. I guess I'll try to > > recompile openssl on some small virtual machine on which I can break > > things. > > The Squeeze libssl and openssl *do* install on

Re: openssl without ssl2 switch

2014-03-26 Thread Brian
On Wed 26 Mar 2014 at 11:59:21 +0100, Veljko wrote: > ssllabs works only with 443 port, but thanks. I guess I'll try to > recompile openssl on some small virtual machine on which I can break > things. The Squeeze libssl and openssl *do* install on Wheezy with 'dpkg -i' and the command to test for

Re: openssl without ssl2 switch

2014-03-26 Thread Veljko
On 2014-Mar-26 00:32, Brian wrote: > A quick scan of the output of 'apt-cache search ssl' shows sslscan and > nikto but both depend on libssl1.0.0 (>= 1.0.1). It's possible the > Squeeze packages might install on Wheezy but that's without taking a > close look at the situation. For public servers t

Re: openssl without ssl2 switch

2014-03-25 Thread Brian
On Wed 26 Mar 2014 at 00:24:17 +0100, Veljko wrote: > On 2014-Mar-25 23:09, Brian wrote: > > > > Rebuild the openssl package(s) with ssl2 support? > > openssl is very important package. I wasn't sure if messing with it > would break something. I was asking if someone knows of any other tool > th

Re: openssl without ssl2 switch

2014-03-25 Thread Veljko
On 2014-Mar-25 23:09, Brian wrote: > > As last poster on that bug number asked, they should have removed it > > from list of available options as well. > > People forget things; like not doing a search with "openssl built > without ssl2 support". Bug report? I actually find one[1] later. It was

Re: openssl without ssl2 switch

2014-03-25 Thread Brian
On Tue 25 Mar 2014 at 23:16:04 +0100, Veljko wrote: > On 2014-Mar-25 20:37, Sven Joachim wrote: > > On 2014-03-25 17:23 +0100, Veljko wrote: > > > > > I wanted to test if ssl2 is turned off on server, so I tried with this > > > command line on my desktop: > > > > > > openssl s_client -connect ser

Re: openssl without ssl2 switch

2014-03-25 Thread Veljko
On 2014-Mar-25 20:37, Sven Joachim wrote: > On 2014-03-25 17:23 +0100, Veljko wrote: > > > I wanted to test if ssl2 is turned off on server, so I tried with this > > command line on my desktop: > > > > openssl s_client -connect server_ip:443 -ssl2 > > > > but I'm getting > > > > "unknown option -

Re: openssl without ssl2 switch

2014-03-25 Thread Sven Joachim
On 2014-03-25 17:23 +0100, Veljko wrote: > I wanted to test if ssl2 is turned off on server, so I tried with this > command line on my desktop: > > openssl s_client -connect server_ip:443 -ssl2 > > but I'm getting > > "unknown option -ssl2 > usage: s_client args" > > although displayed list of su

openssl without ssl2 switch

2014-03-25 Thread Veljko
I wanted to test if ssl2 is turned off on server, so I tried with this command line on my desktop: openssl s_client -connect server_ip:443 -ssl2 but I'm getting "unknown option -ssl2 usage: s_client args" although displayed list of supported options list -ssl2 as valid. If used with -ssl3 ther