Re: Set up the protocol

2012-12-13 Thread Michel
Le 12/12/2012 20:12, Alex Chen a écrit : Another question is how to enforce the 'server' side preference of the cipher suite selection? Is it also part of the SSL_CTX_set_options() Isn't this what you are looking for ? : SSL_OP_CIPHER_SERVER_PREFERENCE in

Re: Set up the protocol

2012-12-12 Thread Alex Chen
Thanks for the reply Florian, Can't I just call SSL_CTX_set_options on the current SSL context I am using before I initiate the connection? Another question is how to enforce the 'server' side preference of the cipher suite selection? Is it also part of the SSL_CTX_set_options() API? On

Re: Set up the protocol

2012-12-11 Thread Florian Weimer
On 12/11/2012 02:44 AM, Alex Chen wrote: I want to set up SSL so it does not use SSL v2 or older, just like that Apache has in its httpd-ssl.conf SSLProtocol all -SSLv2 What is the equivalent API to do this? After reviewing existing documentation and code, I came up with this: // Configure

Set up the protocol

2012-12-10 Thread Alex Chen
I want to set up SSL so it does not use SSL v2 or older, just like that Apache has in its httpd-ssl.conf SSLProtocol all -SSLv2 What is the equivalent API to do this? Thanks. __ OpenSSL Project