Re: CVE-0224-2014 CCS byte

2014-11-25 Thread Deepak
On Nov 22, 2014 2:35 AM, "Dr. Stephen Henson" wrote: > > On Sat, Nov 22, 2014, Deepak wrote: > > > Hi, > > > > Can a SSL client upgraded with patch for CVE-0224-2014 (say OpenSSL > > 0.9.8zb) talk to SSL server which does not have this patch (say OpenSSL > > 0.9.8u) ? > > > > Problem I have - > >

Re: CVE-0224-2014 CCS byte

2014-11-21 Thread Dr. Stephen Henson
On Sat, Nov 22, 2014, Deepak wrote: > Hi, > > Can a SSL client upgraded with patch for CVE-0224-2014 (say OpenSSL > 0.9.8zb) talk to SSL server which does not have this patch (say OpenSSL > 0.9.8u) ? > > Problem I have - > > Server -Apache 2.2.22 with mod_ssl compiled with OpenSSL 0.9.8u > > C