Hi,

The code looks like this:
#ifndef OPENSSL_NO_SSL2
  case 2:
    method = SSLv2_client_method();
    break;
#endif
  case 3:
    method = SSLv3_client_method();
    break;
#ifdef WITH_SSL_TLS1
  case 4:
    method = TLSv1_client_method();
    break;
#endif
  default:
    method = SSLv23_client_method();
    break;

You really should only be using the SSLv23_* method, it's the only
one that supports multiple versions.

If you want to have support for limiting the protocol versions you
should use SSL_(CTX_)set_options with something like
SSL_OP_NO_SSLv3.


Kurt

Reply via email to