Re: OpenSSL 1.0.1g and sendmail/postfix TLS handshakes

[Patrick Welche <prlw1%cam.ac.uk@localhost>]

On Fri, Aug 15, 2014 at 02:22:29PM +0100, Patrick Welche wrote:
> It seems that this has now been addressed in
> 
> http://rt.openssl.org/Ticket/Display.html?id=3336
> 
> so "the padding extension is no longer used by default" since 1 June 2014.
> 
> 
> I think the padding option should should just be zapped from pkgsrc, and
> the next openssl update will make it easy for F5 users to enable the
> work around.

I just got my branches a little mixed up - 1.0.1i should already have
the padding option switched off by default.

Cheers,

Patrick