[erlang-questions] Removing SSL v3 support from the ssl module

Loïc Hoguin essen@REDACTED
Wed Oct 15 11:19:35 CEST 2014


You can specify the protocols the connection will use when 
connecting/listening. I doubt an entire removal is interesting (some 
enterprise systems might require it yada yada), however a patch to the 
docs giving detailed information about it should be good. Also probably 
shouldn't be enabled by default anymore.

On 10/15/2014 11:10 AM, Kenji Rikitake wrote:
> I'd be glad if how to remove SSL v3 support from OTP ssl module is
> provided by the OTP Team, to prevent getting trapped into the POODLE
> bug. (I think it won't be that hard, regarding what I've found from the
> ssl module source code. The keyword atom is "sslv3".)
>
> Regards,
> Kenji Rikitake
> _______________________________________________
> erlang-questions mailing list
> erlang-questions@REDACTED
> http://erlang.org/mailman/listinfo/erlang-questions
>

-- 
Loïc Hoguin
http://ninenines.eu



More information about the erlang-questions mailing list