svn commit: r362620 - head/secure/lib/libcrypto

[John Baldwin]

On 6/25/20 2:30 PM, Benjamin Kaduk wrote:
> On Thu, Jun 25, 2020 at 12:35 PM Gordon Tetlow <gordon at freebsd.org> wrote:
> 
>> Author: gordon
>> Date: Thu Jun 25 19:35:37 2020
>> New Revision: 362620
>> URL: https://svnweb.freebsd.org/changeset/base/362620
>>
>> Log:
>>   Revert OPENSSL_NO_SSL3_METHOD to keep ABI compatibility.
>>
>>   This define caused a couple of symbols to disappear. To keep ABI
>>   compatibility, we are going to keep the symbols exposed, but leave SSLv3
>> as
>>   not in the default config (this is what OPENSSL_NO_SSL3 achieves). The
>>   ramifications of this is an application can still use SSLv3 if it
>>   specifically calls the SSLv3_method family of APIs.
>>
>>
> I think I've seen some distros that keep the functinos around but just have
> them always return failure.

I think this is sensible for 13.0.  It might even be something we could
MFC to 12.x, but certainly for 13.0.

-- 
John Baldwin