In this case the handshake itself is failing. So I need to change in such a way that even though SSLv2 is disabled on the server the server should be able to manage the first packet from the client (i.e V2 hello). We cant set this ion the Cipher List rt????? .... >From this context i want to know how to proceed. Do i need to set the same >upcall argument in the initial stage for both V2 and V3 ?? here in my previous case if both V2 and V3 are running on the server the upcall argumnet func is ssl23_accept(). But if my V3 is only enalbed then the upcall argument is ssl3_accept(). So is this a problem and do we need to have same upcall argument ??? Or is this Ok and do we need to change some where else?????
-shashidhar ________________________________________ From: [email protected] [[email protected]] On Behalf Of Jeffrey Walton [[email protected]] Sent: Friday, November 04, 2011 3:52 PM To: [email protected] Subject: Re: disabling SSLV2 on server dosent work. On Fri, Nov 4, 2011 at 6:05 AM, Shashidhar RP <[email protected]> wrote: > HI > I disabled SSLv2 on the server. When the client which is capable of SSLV2 > and SSLV3 sends the hand shake, client sends first V2 hello rt ???? So the > server is not capable of handling V2 packet as SSLV2 is > disabled on server. Can you please help me here how to proceed. > From our side, they are asking us to change in the server side itself. So in > ssl23_srvr.c there is a function ssl23_accept(). > From where this will be called.??? and how to proceed to change this. You probably want SSL_CTX_set_options (not SSL_set_cipher_list). Also see http://marc.info/?l=openssl-users&m=13149855822752 and http://marc.info/?l=openssl-users&m=129165895207103. Jeff ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected] ::DISCLAIMER:: ----------------------------------------------------------------------------------------------------------------------- The contents of this e-mail and any attachment(s) are confidential and intended for the named recipient(s) only. It shall not attach any liability on the originator or HCL or its affiliates. Any views or opinions presented in this email are solely those of the author and may not necessarily reflect the opinions of HCL or its affiliates. Any form of reproduction, dissemination, copying, disclosure, modification, distribution and / or publication of this message without the prior written consent of the author of this e-mail is strictly prohibited. If you have received this email in error please delete it and notify the sender immediately. Before opening any mail and attachments please check them for viruses and defect. ----------------------------------------------------------------------------------------------------------------------- ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
