You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficserver.apache.org by "ASF GitHub Bot (JIRA)" <ji...@apache.org> on 2016/04/20 23:23:25 UTC

[jira] [Commented] (TS-4357) Remove SSLv2/3 capability

    [ https://issues.apache.org/jira/browse/TS-4357?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15250737#comment-15250737 ] 

ASF GitHub Bot commented on TS-4357:
------------------------------------

GitHub user PSUdaemon opened a pull request:

    https://github.com/apache/trafficserver/pull/589

    TS-4357: Remove SSLv2 and only allow SSLv3 to origin with configure o…

    …ption.

You can merge this pull request into a Git repository by running:

    $ git pull https://github.com/PSUdaemon/trafficserver remove_deprecated_ssl

Alternatively you can review and apply these changes as the patch at:

    https://github.com/apache/trafficserver/pull/589.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #589
    
----
commit 447d7c35e4404e505ad9e072e26a0f8ef95bb63a
Author: Phil Sorber <so...@apache.org>
Date:   2016-04-20T21:09:44Z

    TS-4357: Remove SSLv2 and only allow SSLv3 to origin with configure option.

----


> Remove SSLv2/3 capability
> -------------------------
>
>                 Key: TS-4357
>                 URL: https://issues.apache.org/jira/browse/TS-4357
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: SSL
>            Reporter: Phil Sorber
>            Assignee: Phil Sorber
>             Fix For: 7.0.0
>
>
> We should remote all SSLv2 support and remove client <-> proxy support for SSLv3. We should also require a configure option to enable SSLv3 to origin.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)