Re: [Development] QSsl: finer-grained protocol selection

2014-12-27 Thread Thiago Macieira
On Saturday 27 December 2014 10:52:41 Richard Moore wrote: > Hmm, if you set TLS 1.0 you really need to only negotiate TLS 1.0. If not > then if you're connecting to old servers the TLS extensions will lead the > connection to hang. Perhaps what we want is a minimum and maximum version > (though th

Re: [Development] QSsl: finer-grained protocol selection

2014-12-27 Thread Richard Moore
On 27 December 2014 at 11:44, Mikkel Krautz wrote: > On Sat, Dec 27, 2014 at 11:52 AM, Richard Moore wrote: > > On 26 December 2014 at 21:12, Thiago Macieira > > > wrote: > > > > Hmm, if you set TLS 1.0 you really need to only negotiate TLS 1.0. If not > > then if you're connecting to old serve

Re: [Development] QSsl: finer-grained protocol selection

2014-12-27 Thread Mikkel Krautz
On Sat, Dec 27, 2014 at 11:52 AM, Richard Moore wrote: > > > On 26 December 2014 at 21:12, Thiago Macieira > wrote: >> >> >> I don't think we need fine-grained detection, but we do need something >> better >> than what we have right now. >> >> My suggestion is to set a level. For example, if you

Re: [Development] QSsl: finer-grained protocol selection

2014-12-27 Thread Richard Moore
On 26 December 2014 at 21:12, Thiago Macieira wrote: > > I don't think we need fine-grained detection, but we do need something > better > than what we have right now. > > My suggestion is to set a level. For example, if you set to TlsV10, then > you > get TLS v1.0 and anything newer, existing to