Re: LibreSSL-portable 2.1.1 s_client supports connecting to SSLv3 servers

2014-11-25 Thread Bernard Spil
Hi Joel, Brent, Thanks for the clarification! Joel: You're not seeing me doing an s_server -ssl3 as I was assuming that was not available, I was using OpenSSL 1.0.1j from FreeBSD 10.1 base to run the sslv3-only server. Just tested and indeed it is still possible to create an SSLv3 server wi

Re: LibreSSL-portable 2.1.1 s_client supports connecting to SSLv3 servers

2014-11-25 Thread Joel Sing
On Tue, 25 Nov 2014, Bernard Spil wrote: > Hi, > > Running LibreSSL portable 2.1.1 from FreeBSD ports on FreeBSD 10.1 > $ /usr/local/bin/openssl version > LibreSSL 2.1 > $ uname -a > FreeBSD meterkast3.example.org 10.1-RELEASE FreeBSD 10.1-RELEASE #0 > r264324M: Tue Nov 11 13:46:58 CET 2014 > r...@

Re: LibreSSL-portable 2.1.1 s_client supports connecting to SSLv3 servers

2014-11-25 Thread Brent Cook
Hi Bernard, Current versions of LibreSSL's libssl only disable SSLv3 by default. Support still exists, and programs can still enable it if they choose. For example, you will get an error if you do not explicitly specify -ssl3 as an option to openssl(1). In case there is confusion, libtls, which i

LibreSSL-portable 2.1.1 s_client supports connecting to SSLv3 servers

2014-11-25 Thread Bernard Spil
Hi, Running LibreSSL portable 2.1.1 from FreeBSD ports on FreeBSD 10.1 $ /usr/local/bin/openssl version LibreSSL 2.1 $ uname -a FreeBSD meterkast3.example.org 10.1-RELEASE FreeBSD 10.1-RELEASE #0 r264324M: Tue Nov 11 13:46:58 CET 2014 r...@meterkast3.example.org:/usr/obj/usr/src/sys/BEASTIE