On Fri, Oct 7, 2011 at 1:55 PM, Diffenderfer, Randy <[email protected]> wrote: > How worried should I be about the contents of this? > > http://www.kb.cert.org/vuls/id/864643 (published 2011-9-27) > > Is this the topic that flitted across the board a week or so ago? SSL_OP_ALL includes SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS. Build OpenSSL *without* SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS.
Jeff ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
