3 ms·
> According to the info page, SSLv2 can only be disabled on OpenSSL by having the right (newer) version of OpenSSL installed. Not quite. If you disable the SS
by cjbprime 11y ago
> According to the info page, SSLv2 can only be disabled on OpenSSL by having the right (newer) version of OpenSSL installed.
Not quite. If you disable the SSLv2 protocol, you're fine. If you have the SSLv2 protocol enabled but all the SSLv2 ciphersuites disabled, you're not fine. You can disable the SSLv2 protocol in versions of openssl previous to today's.