18 Jan
2013
18 Jan
'13
6:15 p.m.
On Fri, Jan 18, 2013 at 01:57:49AM +0400, p37sitdu at lavabit.com wrote:
http://www.inventati.org/noname/dillo/https-no-SSLv2.patch
I have found HTTPS server that Dillo was unable to connect to.
After defining SILENT to 0 in https.c I found that SSL_connect failed. Adding ERR_print_errors_fp(stderr) showed error "SSL23_GET_SERVER_HELLO:unknown protocol".
Disabling SSLv2 support fixed the problem for me. And SSLv2 is insecure so it must be disabled anyway.
committed! Thanks, Johannes