<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">Hello,</div><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;"><br></div><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">I’ve made several attempts to compile various versions of OpenSSL, the latest being 1.0.2d for Win32. Although many attempts to compile have been successful and the dlls (and .exe) usable, I have not been able to successfully disable SSLv3. </div><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;"><br></div><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">I attempted on a Windows 7 box using VC 2010, I can compile without no-ssl2 no-ssl3, however, when I try to use no-ssl3, I end up getting linker errors. I notice that the ssleay32.def still has references to SSLv3 and SSLv23. When I attempt to remove these and try to compile again, it continues to fail. </div><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;"><br></div><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">When I could not make this work, I switched to ubuntu and did a cross compile using mingw. In this case I can pass no-ssl2 and no-ssl3 (I even tried disable-ssl2 disable-ssl3 disable-ssl3-method) and it all compiles fine. However, when I scan the application that is using the port, I can still see SSLv3 is used (accepted for a few ciphers):</div><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;"><br></div><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;"><div> Rejected SSLv3 256 bits ADH-AES256-SHA</div><div> Rejected SSLv3 256 bits DHE-RSA-AES256-SHA</div><div> Rejected SSLv3 256 bits DHE-DSS-AES256-SHA</div><div> Accepted SSLv3 256 bits AES256-SHA</div><div> Rejected SSLv3 128 bits ADH-AES128-SHA</div><div> Rejected SSLv3 128 bits DHE-RSA-AES128-SHA</div><div> Rejected SSLv3 128 bits DHE-DSS-AES128-SHA</div><div> Accepted SSLv3 128 bits AES128-SHA</div><div> Rejected SSLv3 168 bits ADH-DES-CBC3-SHA</div><div> Rejected SSLv3 56 bits ADH-DES-CBC-SHA</div><div> Rejected SSLv3 40 bits EXP-ADH-DES-CBC-SHA</div><div> Rejected SSLv3 128 bits ADH-RC4-MD5</div><div> Rejected SSLv3 40 bits EXP-ADH-RC4-MD5</div><div> Rejected SSLv3 168 bits EDH-RSA-DES-CBC3-SHA</div><div> Rejected SSLv3 56 bits EDH-RSA-DES-CBC-SHA</div><div> Rejected SSLv3 40 bits EXP-EDH-RSA-DES-CBC-SHA</div><div> Rejected SSLv3 168 bits EDH-DSS-DES-CBC3-SHA</div><div> Rejected SSLv3 56 bits EDH-DSS-DES-CBC-SHA</div><div> Rejected SSLv3 40 bits EXP-EDH-DSS-DES-CBC-SHA</div><div> Accepted SSLv3 168 bits DES-CBC3-SHA</div><div> Rejected SSLv3 56 bits DES-CBC-SHA</div><div> Rejected SSLv3 40 bits EXP-DES-CBC-SHA</div><div> Rejected SSLv3 128 bits IDEA-CBC-SHA</div><div> Rejected SSLv3 40 bits EXP-RC2-CBC-MD5</div><div> Rejected SSLv3 128 bits RC4-SHA</div><div> Rejected SSLv3 128 bits RC4-MD5</div><div> Rejected SSLv3 40 bits EXP-RC4-MD5</div><div> Rejected SSLv3 0 bits NULL-SHA</div><div> Rejected SSLv3 0 bits NULL-MD5</div></div><div><div><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;"><font face="Tahoma"><br></font></div><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;"><font face="Tahoma">Is there a bug for windows that prevents generating dlls that do not support sslv3?</font></div><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;"><font face="Tahoma"><br></font></div><div><font face="Tahoma"><font face="Calibri,sans-serif">If anyone has been able to compile it and confirmed no ssl3, </font>I<font face="Calibri,sans-serif"> would really appreciate any guidance (and a copy of your ssleay32,dll, libeay32.dll, and openssl.exe).</font></font></div><div><font face="Tahoma"><font face="Calibri,sans-serif"><br></font></font></div><div><font face="Tahoma"><font face="Calibri,sans-serif">Thanks in advance. </font></font></div><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;"><font face="Tahoma"><br></font></div><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;"><font face="Tahoma">Jay</font></div><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;"><br></div><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;"><font face="Tahoma">----</font></div><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;"><div style="font-family: Helvetica; font-size: 12px;"><font face="Tahoma">Jay A Trombley, PMP</font></div><div style="font-family: Helvetica; font-size: 12px;"><font face="Tahoma"><br></font></div><div style="font-family: Helvetica; font-size: 12px;"><font face="Tahoma">Office<span class="Apple-tab-span" style="white-space: pre;"> </span>: +1 </font><font face="Tahoma">(802) 458-0814</font></div><div style="font-family: Helvetica; font-size: 12px;"><span style="font-family: Tahoma;">Mobile</span><span class="Apple-tab-span" style="white-space: pre; font-family: Tahoma;"> </span><span style="font-family: Tahoma;">: +1 (415) 238.4780</span></div><div style="font-family: Helvetica; font-size: 12px;"><font face="Tahoma">Fax <span class="Apple-tab-span" style="white-space: pre;"> </span>: +1 (802) 329.2064</font></div><div style="font-family: Helvetica; font-size: 12px;"><font face="Tahoma">Skype<span class="Apple-tab-span" style="white-space: pre;"> </span>: jay.trombley</font></div><div style="font-family: Helvetica; font-size: 12px;"><font face="Tahoma">Web<span class="Apple-tab-span" style="white-space: pre;"> </span>: <a href="http://www.linkedin.com/in/jaytrombley">http://www.linkedin.com/in/jaytrombley</a></font></div></div></div><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;"><br></div></div></body></html>