On Fri, Dec 5, 2014 at 12:42 PM, Jungle Boogie <jungleboog...@gmail.com>
wrote:

> Dear Richard,
> --------------------------------------------
> From: Richard Hipp <d...@sqlite.org>
> Sent:  Fri, 5 Dec 2014 13:59:15 -0500
> To: fossil-dev@lists.fossil-scm.org
> Subject: Re: [fossil-dev] Fossil-scm.org SSL login mismatch
> >
>
>> On Fri, Dec 5, 2014 at 1:47 PM, Jungle Boogie <jungleboog...@gmail.com>
>> wrote:
>>
>>  Dear Richard,
>>> --------------------------------------------
>>> From: Richard Hipp <d...@sqlite.org>
>>> Sent:  Fri, 5 Dec 2014 13:22:40 -0500
>>> To: fossil-dev@lists.fossil-scm.org
>>> Subject: Re: [fossil-dev] Fossil-scm.org SSL login mismatch
>>>
>>>>
>>>>
>>>
>>> While we're talking about SSL, can Fossil support HSTS, disabling SSL v3,
>>> forward secrecy?
>>>
>>>
>> In as much as I have no idea what that is, probably not.
>>
>>
>>
> Can I make it a feature request to disable SSL v1-3?


I believe you can disable this in OpenSSL at configure / build time.
no-ssl2 & no-ssl3 are both options. If the library used doesn't support
SSLvX then the application using it can't support it either.

-- 
Scott Robison
_______________________________________________
fossil-dev mailing list
fossil-dev@lists.fossil-scm.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/fossil-dev

Reply via email to