Author Topic: OpenSSL not up-to-date in alt.binz 0.42.0.1?  (Read 1954 times)

Offline doppelg

  • Contributor
  • ***
  • Posts: 4
OpenSSL not up-to-date in alt.binz 0.42.0.1?
« on: June 19, 2016, 05:04:26 PM »
Hey there,

after changing the plan at my usenet provider, i can't connect via SSL anymore. The answer the support-team gave me was following one:

Quote
Hi,

We'll be happy to explain. The reason this is happening is that yet another serious vulnerability was found in SSLv2 (the DROWN vulnerability, in this case), and updated versions of OpenSSL have completely removed the SSLv2 code, meaning we cannot simply re-enable it with a configuration change as we have done so in the past. 

You'll need to update your news client to the latest version (which will include the latest version of OpenSSL) or stop using SSL (this version of SSL is insecure anyways)

Please let us know if you have any questions.

is that really an issue with alt.binz?

thanks in advance and kind regards

Offline Rdl

  • Administrator
  • *****
  • Posts: 3935
Re: OpenSSL not up-to-date in alt.binz 0.42.0.1?
« Reply #1 on: June 19, 2016, 05:50:23 PM »
Alt.Binz is not using openssl. However it will start using it in next version.
Please send me via PM address and port of the server in question.