Newer SSL libraries and TLSv1.2 incompatibilities

2012-06-13 Thread Garrison, Jim (ETW)
Regarding my question in the thread titled "When connecting to an https server force use of TLS or SSLv3?". I asked that before I fully understood the problem, which is actually due to a backwards incompatibility in the newest OpenSSL libraries (1.0.1c) used by Subversion. Essentially, the new

RE: Newer SSL libraries and TLSv1.2 incompatibilities

2012-06-14 Thread Garrison, Jim (ETW)
> -Original Message- > From: Garrison, Jim (ETW) [mailto:jim.garri...@nike.com] > Sent: Wednesday, June 13, 2012 3:56 PM > To: users@subversion.apache.org > Subject: Newer SSL libraries and TLSv1.2 incompatibilities > > Regarding my question in the thread titled &

Re: Newer SSL libraries and TLSv1.2 incompatibilities

2012-06-15 Thread Daniel Shahaf
Garrison, Jim (ETW) wrote on Thu, Jun 14, 2012 at 10:49:47 -0700: > > -Original Message- > > From: Garrison, Jim (ETW) [mailto:jim.garri...@nike.com] > > Sent: Wednesday, June 13, 2012 3:56 PM > > To: users@subversion.apache.org > > Subject: N

Re: Newer SSL libraries and TLSv1.2 incompatibilities

2012-06-15 Thread Philip Martin
Daniel Shahaf writes: > Garrison, Jim (ETW) wrote on Thu, Jun 14, 2012 at 10:49:47 -0700: >> >> This is going to cause major headaches for a lot of people. OpenSSL >> client versions 1.0.1 and later can and will cause earlier server >> versions to hang at CLIENT HELLO. There are options in the

Re: Newer SSL libraries and TLSv1.2 incompatibilities

2012-06-15 Thread Daniel Shahaf
Philip Martin wrote on Fri, Jun 15, 2012 at 16:32:13 +0100: > Daniel Shahaf writes: > > > Garrison, Jim (ETW) wrote on Thu, Jun 14, 2012 at 10:49:47 -0700: > >> > >> This is going to cause major headaches for a lot of people. OpenSSL > >> client versions 1.0.1 and later can and will cause earli