0

I need to update OpenSSL to the latest version that supports SSLv3. I need to know which is the latest OpenSSL version that supports SSLv3. On the openssl website I didn't find info about it.

  • 1
    All versions of OpenSSL support SSLv3, by default. An application using OpenSSL can disable it with `SSL_OP*` flags on the generic `SSLv23` methods, or by using newer-version method. Further, all versions of OpenSSL still support SSLv2 in the default build, but it is disabled at runtime unless the default cipherlist is changed to include SSL2-specific ciphers. – dave_thompson_085 Nov 04 '15 at 11:17

1 Answers1

0

I think it depends on how it was compiled: take a look at the build script from Arch Linux if you are interested.

So I think you should be able to compile from source without the no-ssl3 no-ssl3-method compile-time options if you want SSLv3 support.

If you are looking for a package, the last version that I know supported SSLv3 was 1.0.2f, at least on Arch Linux.

starfry
  • 9,273
  • 7
  • 66
  • 96