curl-library
Re: failure to support TLSv1 and SSLv2 on Solaris10
Date: Fri, 11 Jul 2014 22:47:28 +0200
Am 2014-07-11 22:38, schrieb Alona Rossen:
> Hello,
>
>
> Our C++ application uses libcurl 7.21.0 linked to openssl-1.0.0m to implement a variety of functionalities, including SMTP mail transfer.
>
> The application runs on numerous platforms of different versions, including Windows, Solaris 10/11 SPARC, Solaris 10/11 Intel, AIX6.1/7.1, different flavors and versions of Linux.
>
> We set up a test scenario in which we send an email using the same email server and account, utilizing TLSv1, SSLv2, SSLv3 protocols.
> The scenario successfully sends an email via any SSL protocol from any client platform, with the exception of Solaris 10 SPARC, where TLSv1 and SSLv2 fail with the following error message:
Are you serious about SSLv2? That is horribly insecure. If you really
use that, it might be easier to drop SSL at all.
Michael
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2014-07-11