On Wed, Jul 12, 2017 at 03:54:28PM +0200, Emmanuel Hocdet wrote: > Yes i'm confident because i worked a lot to abstract tls version/api support > with > older/newer openssl versions. It's what i do with haproxy's methodVersions > table > for ssl-min/max-ver support. > What i'm missing is OPENSSL_NO_SSL3 define...
OK. > > $ grep -rF methodVersions openssl-1.0.2k/ > > $ echo $? > > 1 > > methodVersions is in ssl_sock.c, it will break nothing. Ah sorry, thank you :-) As you can see I try to be careful these days! Willy
