id	summary	reporter	owner	description	type	status	milestone	component	version	severity	resolution	keywords	cc
11782	OpenSSL SSLv3 methods removed	kurt@…	chris_kohlhoff	"Hi,

asio/ssl/impl/context.ipp you have code that looks loks like:
#if defined(OPENSSL_NO_SSL2)
  case context::sslv2:
  case context::sslv2_client:
  case context::sslv2_server:
    boost::asio::detail::throw_error(
        boost::asio::error::invalid_argument, ""context"");
    break;
#else // defined(OPENSSL_NO_SSL2)
  case context::sslv2:
    handle_ = ::SSL_CTX_new(::SSLv2_method());
    break;
  case context::sslv2_client:
    handle_ = ::SSL_CTX_new(::SSLv2_client_method());
    break;
  case context::sslv2_server:
    handle_ = ::SSL_CTX_new(::SSLv2_server_method());
    break;
#endif // defined(OPENSSL_NO_SSL2)
  case context::sslv3:
    handle_ = ::SSL_CTX_new(::SSLv3_method());
    break;
  case context::sslv3_client:
    handle_ = ::SSL_CTX_new(::SSLv3_client_method());
    break;
  case context::sslv3_server:
    handle_ = ::SSL_CTX_new(::SSLv3_server_method());
    break;


Please do the same for the SSLv3 part but then using OPENSSL_NO_SSL3_METHOD

I've just disabled those SSLv3 methods in Debian.

It would also be nice that you just removed things like TLSv1_1_method() method too, and only use SSLv23_method() (or TLS_method()).  Also see ticket #10690."	Bugs	new	To Be Determined	asio	Boost 1.58.0	Problem