Re: OpenSSL 1.0.1g and sendmail/postfix TLS handshakes

[Patrick Welche <prlw1%cam.ac.uk@localhost>]

On Fri, Aug 15, 2014 at 02:22:29PM +0100, Patrick Welche wrote:
> It seems that this has now been addressed in
> 
> http://rt.openssl.org/Ticket/Display.html?id=3336
> 
> so "the padding extension is no longer used by default" since 1 June 2014.
> 
> 
> I think the padding option should should just be zapped from pkgsrc, and
> the next openssl update will make it easy for F5 users to enable the
> work around.

[Not sure what happened to the last message I sent]

I was out by one and "the next openssl update" has happened - the
padding extension should no longer be used by default in 1.0.1i,
which we have.


Cheers,

Patrick