I did try SSLv2_method() and it works fine. However, I want my application
to handle
all servers (SSLv2 only included). By the way, the server I use to test is
Apache-ssl.
-----Original Message-----
From: Greg Stark [mailto:[EMAIL PROTECTED]]
Sent: Monday, May 07, 2001 12:36 PM
To: [EMAIL PROTECTED]
Subject: Re: Re: SSLv2_method and SSLv23_method
FW: Re: SSLv2_method and SSLv23_methodDid you try SSLv2_method()?
====================
Greg Stark
[EMAIL PROTECTED]
====================
----- Original Message -----
From: Hieu Nguyen
To: '[EMAIL PROTECTED]'
Sent: Monday, May 07, 2001 12:01 PM
Subject: FW: Re: SSLv2_method and SSLv23_method
I want to use SSLv23_method to create SSL_CTX for my client program. I
worked OK if the server supports SSLv3 or TLS 1.0.
However, if the server only supports SSLv2 (as one of our current server) it
seems that my program only negotiates SSLv3 and TLS 1.0.
If failed, it does not try to connect using SSLv2.
I then use the flag SSL_OP_NO_TLSv1 to connect, but the result is still the
same. It will work, if I use both SSL_OP_NO_TLSv1 and
SSL_OP_NO_SSLv3. But in order to do this I have to try to connect using
SSLv23_method() first with no flag. If failed, then I have to fee up
everything and
try to connect using SSLv23_method with the two flags mentions above. This
will slow down my application a great deal.
I wonder it I missing something.
Thank you for any help you could provide.
Hieu
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
