Hi Thomas,

On Fri, October 31, 2014 12:48, Thomas Ward (Dark-Net) wrote:
> fixed 1.6.2-3
> thanks
>
> Confirmed: This was done already.  The commit this was done in was
> this one:
> http://anonscm.debian.org/cgit/collab-maint/nginx.git/commit/?id=9a4e0f0a698bee2b03b7f417ad9286e5eb22141e

Thanks. That's certainly an improvement.

It seems though that from reading the code, that if you omit an explicit
"ssl_protocols" declaration in your config, you will still get SSLv3. Is
that correct?


Cheers,
Thijs


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to