On Sun, Nov 09, 2014 at 07:35:58AM +0100, Peter Meiser wrote:
> Am 09.11.2014 um 00:54 schrieb Julian Gilbey:
> > Hi Peter,
> > 
> > You are right, I could have used SSLv23_client_method, and that would
> > look nicer.  However, AFAICT it would make no difference, as openssl
> > is now configured with no-ssl2 no-ssl3, so SSLv23_client_method will
> > only use TLSv1 anyway.
> > 
> > Or am I wrong on this?
> > 
> >    Julian
> > 
> Hi Julian,
> 
> you "forbid"/exclude the usage of TLS 1.1 and TLS 1.2 if you use 
> TLSv1_client_method. This is not the case if you use SSLv23_client_method as 
> all TLS versions are included and can be negotiated.

Ah, thanks Peter.  I've fixed this, and uploaded it.  It has been
approved for inclusion in jessie.

   Julian


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to