3 ms·

Yea probably a poor choice of a OpenSSL vulnerability, I was assuming this was on by default even when using TLS like lot's of other OpenSSL features but then I

Yea probably a poor choice of a OpenSSL vulnerability, I was assuming this was on by default even when using TLS like lot's of other OpenSSL features but then I found this line, "Only applications using OpenSSL as a DTLS client are affected."[1] CVE-2012-2110 is probably a better choice. [1]: https://www.openssl.org/news/secadv/20140605.txt https://www.openssl.org/news/secadv/20140605.txt

dsp1234 11y ago
CVE-2012-2110 is probably a better choice. From the openssl advisory[0], "In particular the SSL/TLS code of OpenSSL is not affected.". [0] - https://www.openssl.org/news/secadv/20120419.txt https://www.openssl.org/news/secadv/20120419.txt