svn commit: r296371 - stable/10/secure/lib/libcrypto

[Slawa Olhovchenkov]

On Fri, Mar 04, 2016 at 12:40:16AM +0000, Jung-uk Kim wrote:

> Author: jkim
> Date: Fri Mar  4 00:40:15 2016
> New Revision: 296371
> URL: https://svnweb.freebsd.org/changeset/base/296371
> 
> Log:
>   Re-enable SSLv2 support to restore ABI.
>   
>   Excerpt from CHANGES:
>   
>       Even if "enable-ssl2" is used, users who want to negotiate SSLv2 via
>       the version-flexible SSLv23_method() will need to explicitly call
>       either of:
>   
>   	SSL_CTX_clear_options(ctx, SSL_OP_NO_SSLv2);
>       or
>   	SSL_clear_options(ssl, SSL_OP_NO_SSLv2);
>   
>       as appropriate.  Even if either of those is used, or the application
>       explicitly uses the version-specific SSLv2_method() or its client and
>       server variants, SSLv2 ciphers vulnerable to exhaustive search key
>       recovery have been removed.  Specifically, the SSLv2 40-bit EXPORT
>       ciphers, and SSLv2 56-bit DES are no longer available.
>   
>   Approved by:	re (marius, gjb), so (delphij)
> 
> Modified:
>   stable/10/secure/lib/libcrypto/opensslconf-arm.h
>   stable/10/secure/lib/libcrypto/opensslconf-ia64.h
>   stable/10/secure/lib/libcrypto/opensslconf-mips.h
>   stable/10/secure/lib/libcrypto/opensslconf-powerpc.h
>   stable/10/secure/lib/libcrypto/opensslconf-sparc64.h
>   stable/10/secure/lib/libcrypto/opensslconf-x86.h

Need to re-mergered to 10.3 too?