Re: 1.0.0o no fallback to SSLv2?

2010-08-16 Thread Jakob Bohm
On 15-08-2010 03:11, Stefan de Konink wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dear Steve, Op 15-08-10 01:52, Dr. Stephen Henson schreef: OpenSSL 1.0.0 doesn't include any SSLv2 cipersuites by default and new logic means it doesn't send out an SSLv2 compatible client hello if it

Re: 1.0.0o no fallback to SSLv2?

2010-08-15 Thread Crypto Sal
On 08/14/2010 09:11 PM, Stefan de Konink wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dear Steve, Op 15-08-10 01:52, Dr. Stephen Henson schreef: OpenSSL 1.0.0 doesn't include any SSLv2 cipersuites by default and new logic means it doesn't send out an SSLv2 compatible client hello

Re: 1.0.0o no fallback to SSLv2?

2010-08-15 Thread Dr. Stephen Henson
On Sun, Aug 15, 2010, Stefan de Konink wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dear Steve, Op 15-08-10 01:52, Dr. Stephen Henson schreef: OpenSSL 1.0.0 doesn't include any SSLv2 cipersuites by default and new logic means it doesn't send out an SSLv2 compatible client

Re: 1.0.0o no fallback to SSLv2?

2010-08-14 Thread Dr. Stephen Henson
On Sat, Aug 14, 2010, Stefan de Konink wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hello, I have a very odd problem with respect to my recent upgrade to 1.0.0; In principle this is the problem: openssl s_client -connect server.db.kvk.nl:443 -debug CONNECTED(0003)

Re: 1.0.0o no fallback to SSLv2?

2010-08-14 Thread Stefan de Konink
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dear Steve, Op 15-08-10 01:52, Dr. Stephen Henson schreef: OpenSSL 1.0.0 doesn't include any SSLv2 cipersuites by default and new logic means it doesn't send out an SSLv2 compatible client hello if it will never use SSLv2. That effectively