Re: SSL renegociation vulnerability

[Thor Lancelot Simon <tls%panix.com@localhost>]

On Fri, Dec 04, 2009 at 01:13:52AM -0500, Brian Seklecki wrote:
> 
> However, I can confirm that:
> 
>   http://security.FreeBSD.org/patches/SA-09:15/ssl.patch

If this is the patch from OpenSSL 0.9.8l it should not be applied to
NetBSD; it is broken and introduces both forward *and* backwards API
and ABI incompatibility.

Thor