Documentation for SSLv23{,_server,_client}_method():

'''
SSLv23_method(void), SSLv23_server_method(void), SSLv23_client_method(void)

A TLS/SSL connection established with these methods will understand the
SSLv2, SSLv3, and TLSv1 protocol. A client will send out SSLv2 client
hello messages and will indicate that it also understands SSLv3 and
TLSv1. A server will understand SSLv2, SSLv3, and TLSv1 client hello
messages. This is the best choice when compatibility is a concern.
'''
(from https://www.openssl.org/docs/ssl/SSL_CTX_new.html#NOTES )

is inaccurate. These days, TLSv1 ClientHello is sent with Handshake
Protocol set to 1.2 for client sockets (possibly with downgrade to SSLv3
in case of failure) and similarly are chosen supported versions for
server sockets.
Documentations should reflect this fact so that developers aren't scared
to use this method.

-- 
David Jaša <[email protected]>

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to