Re: svn commit: r280306 - in head: secure/lib/libcrypto secure/lib/libssl sys/sys

2015-03-23 Thread Bryan Drewery
On 3/23/2015 2:13 PM, Bryan Drewery wrote: > On 3/23/2015 2:08 PM, Bryan Drewery wrote: >> On 3/20/2015 6:48 PM, Jung-uk Kim wrote: >>> Author: jkim >>> Date: Fri Mar 20 23:48:11 2015 >>> New Revision: 280306 >>> URL: https://svnweb.freebsd.org/changeset/base/280306 >>> >>> Log: >>> Disable insec

Re: svn commit: r280306 - in head: secure/lib/libcrypto secure/lib/libssl sys/sys

2015-03-23 Thread Bryan Drewery
On 3/23/2015 2:08 PM, Bryan Drewery wrote: > On 3/20/2015 6:48 PM, Jung-uk Kim wrote: >> Author: jkim >> Date: Fri Mar 20 23:48:11 2015 >> New Revision: 280306 >> URL: https://svnweb.freebsd.org/changeset/base/280306 >> >> Log: >> Disable insecure SSLv2 support from the base OpenSSL. >> >> D

Re: svn commit: r280306 - in head: secure/lib/libcrypto secure/lib/libssl sys/sys

2015-03-23 Thread Bryan Drewery
On 3/20/2015 6:48 PM, Jung-uk Kim wrote: > Author: jkim > Date: Fri Mar 20 23:48:11 2015 > New Revision: 280306 > URL: https://svnweb.freebsd.org/changeset/base/280306 > > Log: > Disable insecure SSLv2 support from the base OpenSSL. > > Differential Revision: https://reviews.freebsd.or

Re: svn commit: r280306 - in head: secure/lib/libcrypto secure/lib/libssl sys/sys

2015-03-23 Thread Jung-uk Kim
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 03/23/2015 11:35, Philip M. Gollucci wrote: > What about SSLv3 due to POODLE ? IMHO, it is too early to remove SSLv3 support because it is still widely used although there are known vulnerabilities. Please use OpenSSL from ports, i.e., security/

Re: svn commit: r280306 - in head: secure/lib/libcrypto secure/lib/libssl sys/sys

2015-03-23 Thread Philip M. Gollucci
What about SSLv3 due to POODLE ? On Fri, Mar 20, 2015 at 7:48 PM, Jung-uk Kim wrote: > Author: jkim > Date: Fri Mar 20 23:48:11 2015 > New Revision: 280306 > URL: https://svnweb.freebsd.org/changeset/base/280306 > > Log: > Disable insecure SSLv2 support from the base OpenSSL. > > Differentia

svn commit: r280306 - in head: secure/lib/libcrypto secure/lib/libssl sys/sys

2015-03-20 Thread Jung-uk Kim
Author: jkim Date: Fri Mar 20 23:48:11 2015 New Revision: 280306 URL: https://svnweb.freebsd.org/changeset/base/280306 Log: Disable insecure SSLv2 support from the base OpenSSL. Differential Revision:https://reviews.freebsd.org/D1304 Modified: head/secure/lib/libcrypto/opensslcon