"Kurt Roeckx via RT" <r...@openssl.org> wrote:
 |On Mon, Dec 08, 2014 at 08:20:44PM +0100, Steffen Nurpmeso via RT wrote:
 |> and finally i propose three new values for the "Protocol" slot of
 |> SSL_CONF_CTX_cmd(): OLDEST, NEWEST and VULNERABLE.
 |
 |I actually find the option unfortunate and I think it should have
 |been one that sets the minimum and maximum version.  But I think
 |we're too late 1.0.2 process to still change this.

A good benefit for a three line patch.
Being able to say "-ALL,>=TLSv1.1" etc. is surely on the list of
many, and much more complicated to implement than that.

--steffen
_______________________________________________
openssl-dev mailing list
openssl-dev@openssl.org
https://mta.opensslfoundation.net/mailman/listinfo/openssl-dev

Reply via email to