Hello Openssl users,

I have a basic query that
Lets say my SSL client is capable of versions SSL3.0 and SSL3.1.
And my SSL server is capable of versions TLS1.0, TLS1.1 and TLS1.2

Now SSL client has sent a client hello with version SSL3.0. Since, SSL
server doesn't have this version present, it returns "version mismatch"
error.

In this case, what should be the ideal scenario? Does SSL Client need to
resend client hello with TLS1.0?

Like on Server, does SSL client also will have fall back/up mechanisms in
order to avoid version mismatch errors?

Please clarify?

Thanks,
Rajeswari.

Reply via email to