Re: Context options and SSL_MODE_SEND_FALLBACK_SCSV

[Giuseppe D'Angelo]

Hi,

Il 16/10/2014 00:01, Salz, Rich ha scritto:

I recommend that you always set that flag.

In other words: I'd like to do something like

#ifndef SSL_MODE_SEND_FALLBACK_SCSV
#define SSL_MODE_SEND_FALLBACK_SCSV 0x00000080L
#endif

SSL_CTX_set_mode(ctx, SSL_MODE_SEND_FALLBACK_SCSV)



Thanks,
--
Giuseppe D'Angelo | giuseppe.dang...@kdab.com | Software Engineer
KDAB (UK) Ltd., a KDAB Group company
Tel. UK +44-1738-450410, Sweden (HQ) +46-563-540090
KDAB - Qt Experts - Platform-independent software solutions

Do I need to detect which OpenSSL version I have before setting that flag (otherwise it would break the application) or can I always safely set it on a SSL context? in order to have my app always do "the right thing", without adding a bunch of intricate version checks, and having it working automagically when the system OpenSSL libraries get updated. Is it a good idea?

smime.p7s
Description: Firma crittografica S/MIME