OpenSSL 3.0.7 Published

Re:OpenSSL 3.0.7 Published by Sohcahtoa82 on Tuesday November 01, 2022 @01:22PM (#33424255)

In addition to very few distros using OpenSSL 3, your server is only affected if you do client certificate verification, which is exceptionally rare for public internet servers.

As a client, you're only affected if you connect to a malicious server.

[ Parent | on HN ]

Re:OpenSSL 3.0.7 Published by ignaloidas on Tuesday November 01, 2022 @03:46PM (#33426454)

Could in theory be utilized to move laterally in networks where client TLS is used for authentication, which I see used sometimes.

[ Parent | on HN ]