You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Vibe.d does not implement SSL directly, instead relying on either OpenSSL or Botan (with OpenSSL the default).
AFAICS SSLv3 was disabled because OpenSSL disabled it: #1316
If I'm correct, this PR only says that SSLv3* methods were removed from OpenSSL on debian.
Although vibe.d disabled SSLv3 by default, SSLv3 connections can still be achieved by passing the SSL_OP_NO_SSLv3 options to OpenSSL.
kubo39
added a commit
to kubo39/vibe.d
that referenced
this issue
Aug 22, 2019
I'm not sure why SSLv3 is still supported by vibe.d, but it's time we remove it, as it's not just obsolete, but insecure.
The text was updated successfully, but these errors were encountered: