I\'m running an old Debian server that once a day fetches a webpage through a Perl script. Since yesterday, the script fails with a \"500 SSL negotiation failed\" error.
I got it to work for Perl. As I suspected, each program on the server that uses SSL needs to be patched seperately. But this was the solution for Perl:
1) Update OpenSSL (to version 1.0.2d)
This is a necessary step for every program that uses SSL! On my Debian system, I used the instructions found here.
2) Update Net::SSLeay
This was necessary otherwise step 4) would fail.
$ cpan Net::SSLeay
3) Update Getopt::Long
Again, this step was necessary otherwise step 4) would fail.
$ cpan Getopt::Long
4) Update Crypt::SSLeay
Note that this will also update LWP.
$ cpan Crypt::SSLeay