Re: Does Mod_SSL use SSL_get_shared_ciphers()?

Phil Ehrens <[email protected]>
Newsgroups gmane.comp.apache.mod-ssl.user
Message-ID <[email protected]>
Stanley Laufer wrote:
> Does anyone know if Mod_SSL uses the SSL_get_shared_ciphers()
> function from OpenSSL?
> 
> As you may know a buffer overflow has been detected in that
> function in OpenSSL versions prior to 0.9.8d.
> 
> I'm trying to find out if Mod_SSL uses the vulnerable function.

I just checked a couple different versions and did not see that
function.
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [email protected]
Automated List Manager                            [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.