On 2026-05-26 09:51:02 [+0000], Debian Bug Tracking System wrote:
> This is an automatic notification regarding your Bug report
> which was filed against the src:ocaml-conduit package:
> 
> #1137561: belenios: FTBFS with openssl 4.0
…
> Date: Tue, 26 May 2026 11:31:46 +0200
> Source: ocaml-conduit

Okay, so the package completly different.

…
>  ocaml-conduit (8.0.0-3) unstable; urgency=medium
>  .
>    * Use TLSv1 in default context (Closes: #1137561)

The change is

| -    let ctx = Ssl.create_context Ssl.SSLv23 Ssl.Client_context in
| +    let ctx = Ssl.create_context Ssl.TLSv1 Ssl.Client_context in

I have no idea what it does. If this points to something like
SSLv23_method() then this one used to create a TLS connection with the
highest possible TLS protocol version where TLSv1_method() restricits it
to TLSv1 only. A proper replacement would be TLS_method() which is also
available in the openssl 3.x series.

Sebastian

Reply via email to