On Thu, December 11, 2014 19:38, Niels Thykier wrote: > I have applied and committed your patch with 3 changes. These changes > are: > > * In the first paragraph, avoid implying that all packages have been > compiled without SSLv3 support (as I recall, at least openssl still > have it, and given it removes symbols/breaks ABI to remove them, > will keep it for Jessie)
SSLv3 is disabled in OpenSSL 1.0.1j-1 as evidenced by that version's changelog, and also verifyable by trying to use an application compiled against OpenSSL with SSLv3. Thanks for applying the patch. Cheers, Thijs -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: https://lists.debian.org/[email protected]

