Alexander Bluhm <alexander.bl...@gmx.net> writes:

> Hi,

Hi Alexander,

> security/p5-Crypt-SSLeay regression tests fail with
> /usr/bin/perl:/usr/ports/pobj/p5-Crypt-SSLeay-0.72/Crypt-SSLeay-0.72/blib/arch/auto/Crypt/SSLeay/SSLeay.so:
>  undefined symbol 'SSLv3_client_method'
>
> Is it the right approach to remove all calls to SSLv2 and SSLv3 and
> keep only SSLv23?

I think so, and I see no reason for upstream to object.  SSLv23 is the
most portable approach, using SSLv3 unconditionally is insane and
doesn't work any more since other OSes have started to disable SSLv3 by
default.

> The patch-Makefile_PL chunk is no real change but happend with make
> update-patches.
>
> ok?

ok jca@

(That code is gross...)

-- 
jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF  DDCC 0DFA 74AE 1524 E7EE

Reply via email to