AARGH. You *cannot* just set or clear them all...
-- Principal Security Engineer Akamai Technologies, Cambridge, MA IM: [email protected]; Twitter: RichSalz -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Salz, Rich Sent: Wednesday, June 11, 2014 3:04 PM To: [email protected] Subject: RE: SSL_CTX_clear_options(ssl_ctx, SSL_CTX_get_options(ssl_ctx)) The subtle issue is that some option settings *enable* behavior, and some option settings *disable* behavior. You can just set/clear them all and really expect something good to happen. /r$ -- Principal Security Engineer Akamai Technologies, Cambridge, MA IM: [email protected]; Twitter: RichSalz ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
