Re: [PATCH] ssl: fix reference to SSLv2 and disable SSLv3

2016-11-15 Thread Aki Tuomi
On 15.11.2016 13:55, Apollon Oikonomopoulos wrote: > This is driven by the fact that OpenSSL 1.1 does not know about SSLv2 at > all and dovecot's defaults simply make OpenSSL error out with "Unknown > protocol 'SSLv2'"[1]. So we change the defaults to refer to SSLv2 iff OpenSSL > seems to know so

[PATCH] ssl: fix reference to SSLv2 and disable SSLv3

2016-11-15 Thread Apollon Oikonomopoulos
This is driven by the fact that OpenSSL 1.1 does not know about SSLv2 at all and dovecot's defaults simply make OpenSSL error out with "Unknown protocol 'SSLv2'"[1]. So we change the defaults to refer to SSLv2 iff OpenSSL seems to know something about it. While at it, it's also a good idea to disa