| Description: | OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)and Transport Layer Security (TLS v1) protocols, as well as afull-strength, general purpose cryptography library.It was discovered that OpenSSL would accept ephemeral RSA keys when usingnon-export RSA cipher suites. A malicious server could make a TLS/SSLclient using OpenSSL use a weaker key exchange method. (CVE-2015-0204) |