SSL/TLS parameters used in Bro, Broccoli

Zeek
1

Hi,

in Debian/unstable (and probably elsewhere) support for SSLv3 has been
dropped: SSLv3_method(), SSLv3_server_method(), SSLv3_client_method()
are no longer available. This leads to build failures with at least bro
and broccoli (see
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804104).

What should SSLv3_method() in SSL_CTX_new(SSLv3_method()) be replaced
with? Would SSLv23_method() which is still available and (according to
the OpenSSL documentation) means support for SSLv2, 3 and TLSv1, 1.1,
1.2 appropriate?

Cheers,
-Hilko

2

We have a ticket related to this:
  https://bro-tracker.atlassian.net/browse/BIT-1499

  .Seth

3

* Seth Hall:

We have a ticket related to this:
  [BIT-1499] - Bro Tracker

Alright, I will be using those patches for the Debian packages of bro
and broccoli.

Thank you for answering so quickly!

Cheers,
-Hilko