Eric Rescorla <[EMAIL PROTECTED]>: > DESCRIPTION: If you have your server configured to support only > SSLv3 or only TLS (SSLv3_method, SSLv3_server_method, TLSv1_method, > TLSv1_server_method) then the server will simply attempt to > use whatever version of SSL/TLS it is configured to, ignoring > the client's version number. [...]
Fixed. I've also changed s23_get_client_hello to select TLS 1.0 in the similar case so that the client at least gets the alert. (The alert will be sent using the *client's* protocol version number, otherwise we can't expect the client to understand it.) ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
