Discussion:
[patch] disable SSLv2 support
p***@public.gmane.org
2013-01-17 21:57:49 UTC
Permalink
http://www.inventati.org/noname/dillo/https-no-SSLv2.patch

I have found HTTPS server that Dillo was unable to connect to.

After defining SILENT to 0 in https.c I found that SSL_connect
failed. Adding ERR_print_errors_fp(stderr) showed error
"SSL23_GET_SERVER_HELLO:unknown protocol".

Disabling SSLv2 support fixed the problem for me. And SSLv2 is
insecure so it must be disabled anyway.
Johannes Hofmann
2013-01-18 18:15:24 UTC
Permalink
Post by p***@public.gmane.org
http://www.inventati.org/noname/dillo/https-no-SSLv2.patch
I have found HTTPS server that Dillo was unable to connect to.
After defining SILENT to 0 in https.c I found that SSL_connect
failed. Adding ERR_print_errors_fp(stderr) showed error
"SSL23_GET_SERVER_HELLO:unknown protocol".
Disabling SSLv2 support fixed the problem for me. And SSLv2 is
insecure so it must be disabled anyway.
committed! Thanks,
Johannes

Loading...