dovecot - Mar 2015 - imap-login SSLv3 causes signal 11, core dump and DoS. ssl_protocols = ??

Am 21.03.2015 um 12:02 schrieb James:
> On 21/03/2015 10:55, Reindl Harald wrote:
>>
>> well, remove that brickage of "special compile"
>
> I'm sorry but I did not understand your comment
why do you compile openssl that way?



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20150321/70641369/attachment.sig>

On 21/03/2015 11:07, Reindl Harald wrote:
>>> well, remove that brickage of "special compile"
>>
>> I'm sorry but I did not understand your comment
>
> why do you compile openssl that way?
What way?  With or without ssl3?  I've now done it both ways.

Reading:
https://wiki.openssl.org/index.php/Compilation_and_Installation
no-ssl3 seems to be a popular and legitimate option.

Am 21.03.2015 um 12:12 schrieb James:
> On 21/03/2015 11:07, Reindl Harald wrote:
>
>>>> well, remove that brickage of "special compile"
>>>
>>> I'm sorry but I did not understand your comment
>>
>> why do you compile openssl that way?
>
> What way?  With or without ssl3?  I've now done it both ways.
>
> Reading:
> https://wiki.openssl.org/index.php/Compilation_and_Installation
> no-ssl3 seems to be a popular and legitimate option
that maybe all fine and true, but since others can't reproduce your 
problem it's likely your openssl build and not dovecot itself

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20150321/60123d4a/attachment.sig>