Hi, * Matthias Andree <matthias.and...@gmx.de> [2011-04-11 16:06]: > commit c22a3afca46c83ee6d53a6ee58deb122f309c460 > Author: Matthias Andree <matthias.and...@gmx.de> > Date: Mon Apr 11 14:08:32 2011 +0200 > > Remove support for SSLv2 (fixes Debian Bug #622054). > > SSLv2 has been deprecated since 1996, and is insecure. > Remove --sslproto SSL2 support. > Set SSL_OP_NO_SSLvSSL_CTX 2 option so that the SSLv23 multi-version > client no longer negotiates SSLv2. > > Note that some distributions (such as Debian) build OpenSSL 1.0.0 > without SSLv2 support, so on those, the build would fail. > > Fixes Debian Bug #622054 > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622054
Thanks for the patch, will upload a new fetchmail package probably tomorrow. Cheers Nico -- Nico Golde - http://www.ngolde.de - n...@jabber.ccc.de - GPG: 0xA0A0AAAA For security reasons, all text in this mail is double-rot13 encrypted.
pgpgwkiB7kb32.pgp
Description: PGP signature
