From a2ae6f8d15d7caf815d7bdd13df833fd1b2af5cc Mon Sep 17 00:00:00 2001 From: Matthias Andree Date: Fri, 16 Jan 2015 20:48:46 +0100 Subject: Permit build on SSLv3-disabled OpenSSL, providing that these also omit the declaration of SSLv3_client_method(). Related to Debian Bug#775255. Version report lists -SSLv3 on +SSL builds that omit SSLv3_client_method(). Version report lists -SSLv2 on +SSL builds that omit SSLv2_client_method(). --- NEWS | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'NEWS') diff --git a/NEWS b/NEWS index c3f116b0..8e27910c 100644 --- a/NEWS +++ b/NEWS @@ -53,6 +53,8 @@ removed from a 6.4.0 or newer release.) fetchmail may switch to a different SSL library. * SSLv2 support will be removed from a future fetchmail release. It has been obsolete for more than a decade. +* SSLv3 support may be removed from a future fetchmail release. It has been + obsolete for many years and found insecure. Use TLS. -------------------------------------------------------------------------------- @@ -71,6 +73,10 @@ fetchmail-6.3.27 (not yet released, if ever): * Point to --idle from GENERAL OPERATION to clarify --idle and multiple mailboxes do not mix. In response to Jeremy Chadwick's trouble 2014-11-19, fetchmail-users mailing list. +* Fix SSL-enabled build on systems that do not declare SSLv3_client_method(). + Related to Debian Bug#775255. +* Version report lists -SSLv3 on +SSL builds that omit SSLv3_client_method(). +* Version report lists -SSLv2 on +SSL builds that omit SSLv2_client_method(). # KNOWN BUGS AND WORKAROUNDS (This section floats upwards through the NEWS file so it stays with the -- cgit v1.2.3