[openssl-users] Disable SSL3 and enable TLS1? / Ambiguous "DES-CBC3-SHA"

[Jakob Bohm]

On 08/04/2015 02:06, Jeffrey Walton wrote:
> On Tue, Apr 7, 2015 at 1:15 PM, David Rueter <drueter at assyst.com> wrote:
>>>> Is OpenSSL in its own DLL/DLLs?
>> Yes, the OpenSSL DLL’s libeay32.dll and ssleay32.dll are used, and in fact I
>> have updated them to 1.0.2a
>>
>> Yes, performing my own build on these DLL’s is an option, and I may pursue
>> it.  I just need to get a Windows dev environment set up to build these.
> You also have the option of using Thomas Hruska's Win32-OpenSSL at
> https://slproweb.com/products/Win32OpenSSL.html.
>
> Thomas makes 1.0.2a available for download on his site.
Not useful!  Those are default builds with SSL3 enabled.
The suggestion was to buildOpenSSL with the unwanted
features (in this case SSL3) disabled at configure/build
time.

Enjoy

Jakob
-- 
Jakob Bohm, CIO, Partner, WiseMo A/S.  http://www.wisemo.com
Transformervej 29, 2860 Søborg, Denmark.  Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded