❦ 29 avril 2016 14:23 +0400, "Anoop Seburuth" <an...@hackers.mu> :

> As Described the problem: https://www.rfc-editor.org/rfc/rfc7568.txt
> According to rfc7568, sslv3 is no longer considered secure. This patch
> disables sslv3 if the system's openssl is compiled without
> it. (Jessie)

This patch is applied in more recent versions of HAProxy. So, this fix
would be only for Jessie. I highly doubt that we could push such a patch
to a stable release. Isn't SSLv3 already not usable due to the fact it
is disabled in OpenSSL?
-- 
What I tell you three times is true.
                -- Lewis Carroll

Attachment: signature.asc
Description: PGP signature

Reply via email to