Bug#804607: lua-sec: SSLv3 method

2015-11-16 Thread Enrico Tassi
On Sat, Nov 14, 2015 at 02:16:53PM +0100, Kurt Roeckx wrote: > A few use tlsv1 which isn't much better. Thanks for your help, I'm preparing an upload. Can you argument why tlsv1 is not good? See also: https://github.com/brunoos/luasec/issues/58 Best, -- Enrico Tassi

Bug#804607: lua-sec: SSLv3 method

2015-11-14 Thread Kurt Roeckx
Looking at the code it has: static LSEC_SSL_METHOD* str2method(const char *method) { if (!strcmp(method, "sslv23")) return SSLv23_method(); if (!strcmp(method, "sslv3")) return SSLv3_method(); if (!strcmp(method, "tlsv1")) return TLSv1_method(); #if (OPENSSL_VERSION_NUMBER >=