On Sun, Apr 01, 2012 at 12:13:44AM +0200, Dr. Stephen Henson wrote:
> 
> OpenSSL 1.0 and later will use an *SSLv3* compatible client hello provided no
> SSLv2 ciphersuites are requested. The default cipherstring now excludes all
> SSLv2 ciphersuites so by default you wont get SSLv2 client hellos. If however
> you specify ALL as the cipherstring you will get SSLv2 ciphersuites present.
> 
> If the library has been compiled with no-ssl2 this wont happen and you'll only
> ever get the SSLv3 compatible client hello.

So like I said, I compiled with no-ssl2, which at least explains
the difference in behaviour.


Kurt

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to