Re: soap request force ssl connection

Replies are listed 'Best First'.
Re^2: soap request force ssl connection by aktinide (Initiate) on May 14, 2015 at 13:13 UTC
setting ssl_opts => { SSL_version => 'SSLv3'} results in : `DEBUG: .../IO/Socket/SSL.pm:1780: SSL Version SSLv3 not supported` [download] therefore my assumption is there is just no ssl communicaton at this point in time. SSL_version in the Perl Module somehow has different effect than -ssl3 flag to openssl s_client	[reply] [d/l]
Re^3: soap request force ssl connection by noxxi (Pilgrim) on May 14, 2015 at 19:12 UTC
... SSL Version SSLv3 not supported That means that the OpenSSL library used by Perl (Net::SSLeay) is compiled without SSLv3 support. Looks like latest Strawberry Perl comes with OpenSSL 1.02 and disabled SSLv3 support. This means you will not be able to use SSLv3 with this Perl. SSL_version in the Perl Module somehow has different effect than -ssl3 flag to openssl s_client No, it should not. Apart from that the server looks fairly broken to me, i.e. only support for SSLv3 and no support for SSLv23 handshake.	[reply]
Re^3: soap request force ssl connection by Anonymous Monk on May 14, 2015 at 23:44 UTC
Two things, SSLv3 has been outdated since 1999 when http://en.wikipedia.org/wiki/Transport_Layer_Security#TLS_1.0 came out That is like 150 years in computer time ssLv3 is vulnerable SSLv3 Support Disabled By Default Due to POODLE Vulnerability So if you want something old and broken, you have to go ou of your way to compile it back in and what not	[reply]