On Fri, Mar 04, 2016 at 12:40:16AM +0000, Jung-uk Kim wrote: > Author: jkim > Date: Fri Mar 4 00:40:15 2016 > New Revision: 296371 > URL: https://svnweb.freebsd.org/changeset/base/296371 > > Log: > Re-enable SSLv2 support to restore ABI. > > Excerpt from CHANGES: > > Even if "enable-ssl2" is used, users who want to negotiate SSLv2 via > the version-flexible SSLv23_method() will need to explicitly call > either of: > > SSL_CTX_clear_options(ctx, SSL_OP_NO_SSLv2); > or > SSL_clear_options(ssl, SSL_OP_NO_SSLv2); > > as appropriate. Even if either of those is used, or the application > explicitly uses the version-specific SSLv2_method() or its client and > server variants, SSLv2 ciphers vulnerable to exhaustive search key > recovery have been removed. Specifically, the SSLv2 40-bit EXPORT > ciphers, and SSLv2 56-bit DES are no longer available. > > Approved by: re (marius, gjb), so (delphij) > > Modified: > stable/10/secure/lib/libcrypto/opensslconf-arm.h > stable/10/secure/lib/libcrypto/opensslconf-ia64.h > stable/10/secure/lib/libcrypto/opensslconf-mips.h > stable/10/secure/lib/libcrypto/opensslconf-powerpc.h > stable/10/secure/lib/libcrypto/opensslconf-sparc64.h > stable/10/secure/lib/libcrypto/opensslconf-x86.h
Need to re-mergered to 10.3 too? _______________________________________________ svn-src-stable-10@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/svn-src-stable-10 To unsubscribe, send any mail to "svn-src-stable-10-unsubscr...@freebsd.org"
