This is an in-house patch that disables SSLv2 and SSLv3 protocol for
    slrn. This change was sent upstream and will be incorporated into the
    future release of version 1.0.3.

diff -rupN slrn-0.9.9p1-orig/sltcp.c slrn-0.9.9p1/sltcp.c
--- slrn-0.9.9p1-orig/src/sltcp.c	2015-06-04 12:45:59.330874707 -0700
+++ slrn-0.9.9p1/src/sltcp.c	2015-06-04 12:46:38.175640243 -0700
@@ -572,6 +572,7 @@ static SSL *alloc_ssl (void)
 	     print_error (_("SSL_CTX_new failed.\n"));
 	     return NULL;
 	  }
+	SSL_CTX_set_options (c, SSL_OP_NO_SSLv2|SSL_OP_NO_SSLv3);
 	This_SSL_Ctx = c;
 	atexit (deinit_ssl);