FreeBSD Security Advisory FreeBSD-SA-05:21.openssl

[Ian G]

Jacques Vidrine wrote:
> 
> On 2005-10-12, at 12:10 :19, Peter Jeremy wrote:
> 
>> On Tue, 2005-Oct-11 09:45:53 -0700, Jacques Vidrine wrote:
>>
>>> On Oct 11, 2005, at 7:25 AM, Ian G wrote:
>>>
>>>> Isn't the workaround obviously to switch off V2?
>>>
>>>
>>> Yes.  Sorry that wasn't mentioned.
>>
>>
>> That sounds like a good workaround.  How do I implement it?  I've
>> looked through the documentation and can't find any reference to a
>> runtime OpenSSL configuration file that would let me do this.
> 
> 
> I'm not aware of a global option for OpenSSL, either.  Disabling  SSLv2 
> would need to be handled by the application, i.e. turn off  SSLv2 for 
> each of your SSL/TLS applications.  Cheers,


Seems correct, no global option.  Sorry to have
got your hopes up there.

iang



-------- Original Message --------
Subject: Re: [Fwd: Re: FreeBSD Security Advisory FreeBSD-SA-05:21.openssl]
Date: Fri, 14 Oct 2005 14:38:15 +0100
From: Ben Laurie <ben at algroup.co.uk>
To: Ian G <iang at iang.org>

Ian G wrote:
 > Does this sound right?  No global option in OpenSSL
 > to turn off SSL v2?

Yes.