09-26-2023, 03:37 AM
(07-04-2023, 05:46 AM)Alexandre Machado Wrote: This affects all OpenSSL versions as far as I know. I'll do some research but if this is not fixed in OpenSSL, it is a problem without solution, unless you move to Http.sys.
However, I'd like to point out that a gigantic part of Internet's HTTPS is powered by OpenSSL. I'm not convinced that these auditors consider half the world's HTTPS sites "unsafe"
Sorry to disturb you. Client forcing me to fix this medium vulnerability. Is there any fix from Openssl or any other way to fix it?