]> Pileus Git - ~andy/fetchmail/commit
Remove support for SSLv2 (fixes Debian Bug #622054).
authorMatthias Andree <matthias.andree@gmx.de>
Mon, 11 Apr 2011 12:08:32 +0000 (14:08 +0200)
committerMatthias Andree <matthias.andree@gmx.de>
Mon, 11 Apr 2011 12:08:32 +0000 (14:08 +0200)
commitc22a3afca46c83ee6d53a6ee58deb122f309c460
tree7b91c2e12dcc8ca2253fc239761207e9ee6fabb0
parent4ab1f5f5f64505f46789c61a6e5a206f3c2ee83e
Remove support for SSLv2 (fixes Debian Bug #622054).

SSLv2 has been deprecated since 1996, and is insecure.
Remove --sslproto SSL2 support.
Set SSL_OP_NO_SSLvSSL_CTX 2 option so that the SSLv23 multi-version
client no longer negotiates SSLv2.

Note that some distributions (such as Debian) build OpenSSL 1.0.0
without SSLv2 support, so on those, the build would fail.

Fixes Debian Bug #622054
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622054
NEWS
fetchmail.man
options.c
po/de.po
socket.c