# SSL/TLS parameters used in Bro, Broccoli

**URL:** <https://community.zeek.org/t/ssl-tls-parameters-used-in-bro-broccoli/3893>\
**Category:** Zeek\
**Created:** [November 5, 2015, 4:22pm UTC](https://community.zeek.org/t/ssl-tls-parameters-used-in-bro-broccoli/3893 "2015-11-05T16:22:48Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hilko\_Bengen](https://avatars.discourse-cdn.com/v4/letter/h/e99b99/32.png) [@Hilko\_Bengen](https://community.zeek.org/u/Hilko_Bengen)\
**Post date:** [November 5, 2015, 4:22pm UTC](https://community.zeek.org/t/ssl-tls-parameters-used-in-bro-broccoli/3893/1 "2015-11-05T16:22:48Z")

</div>

Hi,

in Debian/unstable (and probably elsewhere) support for SSLv3 has been  
dropped: SSLv3\_method(), SSLv3\_server\_method(), SSLv3\_client\_method()  
are no longer available. This leads to build failures with at least bro  
and broccoli (see  
[https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804104](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804104)).

What should SSLv3\_method() in SSL\_CTX\_new(SSLv3\_method()) be replaced  
with? Would SSLv23\_method() which is still available and (according to  
the OpenSSL documentation) means support for SSLv2, 3 and TLSv1, 1.1,  
1.2 appropriate?

Cheers,  
-Hilko

---

<div class="post-metadata">

**Author:** ![Seth\_Hall3](https://avatars.discourse-cdn.com/v4/letter/s/d6d6ee/32.png) [@Seth\_Hall3](https://community.zeek.org/u/Seth_Hall3)\
**Post date:** [November 5, 2015, 5:09pm UTC](https://community.zeek.org/t/ssl-tls-parameters-used-in-bro-broccoli/3893/2 "2015-11-05T17:09:47Z")

</div>

We have a ticket related to this:  
&nbsp;&nbsp;[https://bro-tracker.atlassian.net/browse/BIT-1499](https://bro-tracker.atlassian.net/browse/BIT-1499)

&nbsp;&nbsp;.Seth

---

<div class="post-metadata">

**Author:** ![Hilko\_Bengen](https://avatars.discourse-cdn.com/v4/letter/h/e99b99/32.png) [@Hilko\_Bengen](https://community.zeek.org/u/Hilko_Bengen)\
**Post date:** [November 5, 2015, 5:19pm UTC](https://community.zeek.org/t/ssl-tls-parameters-used-in-bro-broccoli/3893/3 "2015-11-05T17:19:46Z")

</div>

\* Seth Hall:

> We have a ticket related to this:  
> &nbsp;&nbsp;[[BIT-1499] - Bro Tracker](https://bro-tracker.atlassian.net/browse/BIT-1499)

Alright, I will be using those patches for the Debian packages of bro  
and broccoli.

Thank you for answering so quickly!

Cheers,  
-Hilko

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:43pm UTC](https://community.zeek.org/t/ssl-tls-parameters-used-in-bro-broccoli/3893/4 "2022-05-06T15:43:12Z")

</div>


