Re: use of SSLv3 in Koji

[Kevin Fenzi]

On Thu, 16 Oct 2014 16:58:48 -0500
Mátyás Selmeci <matyas(a)cs.wisc.edu&gt; wrote:

>  Hi,
>  It looks like Koji is hardcoded to use SSLv3 (looking at 
>  CreateSSLContext() in koji/SSLCommon.py) and does not work if SSLv3
>  is disabled in the apache configs of koji-hub. Are there any plans to 
>  change that, in light of the POODLE SSLv3 vulnerability?
>  Thanks, 
Yes, but it turns out there's no cause for undue haste... 

https://lists.fedoraproject.org/pipermail/infrastructure/2014-October/014...

kevin