SSLv3

[HengeDK]

how can I disable SSLv3

[thezoggy]

in rss-synd.tcl,
after the line:
set packages(tls) [catch {package require tls}]; # https
add:
::tls::init -ssl2 0 -ssl3 0 -tls1 1

and then later in the file, replace:
::http::register https 443 ::tls::socket
with:
::http::register https 443 [list ::tls::socket -tls1 1]

[HengeDK]

still get this

(State: {error flushing "sock55fba83c31d0": connection reset by peer} {error flushing "sock55fba83c31d0": connection reset by peer
while executing
"flush $sock"} {POSIX ECONNRESET {connection reset by peer}})
SSL channel "sock55fba83c31d0": error: sslv3 alert handshake failure

[thezoggy]

restart after modifying the code? what version of tcl?

[HengeDK]

yes I restarted

tcl8.6

[HengeDK]

is this issue because the site is running with cloudflare ??

[HengeDK]

Found this
teeli/urltitle#6
problems with sni and cloudflare
don't know if it can be used