The OpenSSL Library no longer includes SSLv3

Previous posts about the upcoming OpenSSL 4.0 release:

  1. removing ENGINE code
  2. removing deprecated functions for creating or modifying custom METHODS
  3. no longer registering a function via atexit function
  4. adding ECH support

Summary

Secure Sockets Layer version 3.0 (SSLv3) was deprecated in RFC
7568
. SSLv3 was disabled at
build-time in OpenSSL 1.0.2h by default. As of OpenSSL 4.0, SSLv3 support
has been removed altogether.

In addition, OpenSSL no longer supports the SSLv2 Client Hello.

This article has been indexed from Blog on OpenSSL Library

Read the original article: