Re: Disable SSL2 and SSL3 in ssl.el?

The ssl-support I use regularly is with imap and gnus and controlled by the variable: imap-ssl-program Triggered by this discussion I customized it to this: ("openssl s_client -quiet -tls1_2 -connect %s:%p" "openssl s_client -quiet -tls1_1 -connect %s:%p" "openssl s_client -quiet -tls1 -connect %s:%p") and my openssl connections are now using tlsv1.2 instead of sslv3 as before! So from imap.el we have (defcustom imap-ssl-program '("openssl s_client -quiet -ssl3 -connect %s:%p" "openssl s_client -quiet -ssl2 -connect %s:%p" "s_client -quiet -ssl3 -connect %s:%p" "s_client -quiet -ssl2 -connect %s:%p") ... I suggest that we change this to use tls only, probably just 1.2 and 1.1. Users that need sslv3 can always customize this. Yours -- %% Mats _______________________________________________ XEmacs-Beta mailing list XEmacs-Beta(a)xemacs.org http://lists.xemacs.org/mailman/listinfo/xemacs-beta