aboutsummaryrefslogtreecommitdiff
path: root/sys/i386
diff options
context:
space:
mode:
authorConrad Meyer <cem@FreeBSD.org>2020-07-01 00:59:28 +0000
committerConrad Meyer <cem@FreeBSD.org>2020-07-01 00:59:28 +0000
commit80a315ffb6053e5e2b1a0d07d7571fad0e0a64bd (patch)
tree80983adc0bdedafd1f7279a7652dbf8745b7edb8 /sys/i386
parent94bc2117b4adaf7101cc412f4277e5812ad61ae2 (diff)
downloadsrc-80a315ffb6053e5e2b1a0d07d7571fad0e0a64bd.tar.gz
src-80a315ffb6053e5e2b1a0d07d7571fad0e0a64bd.zip
Replace OPENSSL_NO_SSL3_METHODs with dummies
SSLv3 has been deprecated since 2015 (and broken since 2014: "POODLE"); it should not have shipped in FreeBSD 11 (2016) or 12 (2018). No one should use it, and if they must, they can use some implementation outside of base. There are three symbols removed with OPENSSL_NO_SSL3_METHOD: SSLv3_client_method SSLv3_method SSLv3_server_method These symbols exist to request an explicit SSLv3 connection to a server. There is no good reason for an application to link or invoke these symbols instead of TLS_method(), et al (née SSLv23_method, et al). Applications that do so have broken cryptography. Define these symbols for some pedantic definition of ABI stability, but remove the functionality again (r361392) after r362620. Reviewed by: gordon, jhb (earlier-but-equivalent version both) Discussed with: bjk, kib Differential Revision: https://reviews.freebsd.org/D25493
Notes
Notes: svn path=/head/; revision=362818
Diffstat (limited to 'sys/i386')
0 files changed, 0 insertions, 0 deletions