On Thu, 16 Oct 2014 16:58:48 -0500
Mátyás Selmeci <matyas(a)cs.wisc.edu> wrote:
It looks like Koji is hardcoded to use SSLv3 (looking at
CreateSSLContext() in koji/SSLCommon.py) and does not work if SSLv3
is disabled in the apache configs of koji-hub. Are there any plans to
change that, in light of the POODLE SSLv3 vulnerability?
Yes, but it turns out there's no cause for undue haste...