Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 01 Aug 2002 00:38:46 -0400
From:      "Colonel Sam Flagg, U.S. Army Intelligence (ret)" <colonel_flagg@internetwarzone.org>
To:        freebsd-security@freebsd.org
Subject:   openssl workaround?
Message-ID:  <5.1.0.14.2.20020801003255.0348b558@none.nowhere.org>

next in thread | raw e-mail | index | archive | help
I'm sure this was covered, but I've just joined the group, so if someone 
would copy/paste the answer or whatever, I would be grateful.

In the recent openssl advisory, we're told that a workaround is possible...


Topic:          openssl contains multiple vulnerabilities



IV.  Workaround

Disabling the SSL2 protocol in server applications should render
server exploits harmless.  There is no known workaround for client
applications.


My question is, if we must wait to make world, what's the best way to 
disable SSL2?



/CF


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5.1.0.14.2.20020801003255.0348b558>