Comment # 11 on bug 974763 from Loganaden Velvindron

(In reply to Lars Vogdt from comment #10)
> (In reply to Andreas Stieger from comment #9)
> > Lars, you accepted the factory subbmission. Could you also review the
> > backport into Maintenance SR#387933?
> 
> I'm unsure if the provided patch alone with disable SSLv3 completely as I
> did not see where "OPENSSL_NO_SSL3" is defined before.
> 
> David: can you enlighten me here?


OpenSSL is compiled with no-ssl3 since 2015:

Fri Jun 26 00:11:20 UTC 2015 - crrodriguez@opensuse.org

- Build with no-ssl3, for details on why this is needed read
  rfc7568.


According to https://wiki.openssl.org/index.php/Compilation_and_Installation:

no-ssl3    Disables SSLv3. OPENSSL_NO_SSL3 will be defined in the OpenSSL
headers.