[openssl-users] Getting error 'SSLv2_client_method': identifier not found
Jeffrey Walton
noloader at gmail.com
Wed Jun 29 00:03:50 UTC 2016
On Mon, Jun 27, 2016 at 3:49 PM, Michael Wojcik
<Michael.Wojcik at microfocus.com> wrote:
> SSLv2 is no longer supported, and neither are the SSLv2_*_method calls. (And
> yes, this causes build problems when updating to newer OpenSSL builds; and
> while that causes some pain, it was the Right Thing to do.)
>
> As Rich said, don't use SSLv2. Don't use SSLv3. If you can help it, don't
> use anything older than TLSv1.2.
The library should have unconditionally set OPENSSL_NO_SSL2 when it
yanked SSLv2 support. Iit was warned about use cases like this.
When SSLv2 was re-added to return NULL because, it still omitted
OPENSSL_NO_SSL2.
There was no need to break existing client code in this case.
More information about the openssl-users
mailing list