[openssl-dev] [openssl.org #4038] SSLv2 session reuse is broken on the 1.0.2 branch

[Matt Caswell]

On 15/06/16 16:31, Daniel Kahn Gillmor wrote:
> On Wed 2016-06-15 09:51:37 -0400, Salz, Rich wrote:
>> I think OpenSSL needs to decide if SSLv2 bugs will be getting fixed.
>> Matt and I disagree :)
> 
> Isn't the existence of SSLv2 a bug? ;)

Fixed in OpenSSL 1.1.0 :-)

Matt