I had a really funny evening debugging OpenSSL and the secure 
server used by countrywide.co.nz.

It turned out that for some obscure reason, the server doesn't 
accept a SSL v2 connect, even when support of SSL v3 or TLS v1 
*is* announced within that (a perfectly legal operation in the 
protocol). A "pure" SSL v3 connect is performed, however, and 
"128 bit compatibility" is shown.

Anyway, it will work with OpenSSL in V3 and may, in worst case, 
require manual turning off of SSL v2 "downward" compatibility.

Olli


--
Oliver Wagner <[EMAIL PROTECTED]>  http://www.vapor.com/
Finger: [EMAIL PROTECTED]          ICQ: you're kidding :)

Reply via email to