Hi!
This morning a question arose about the use of SSLv3_server_method().
The text in SSL_CTX_new.pod is wrong. I thought I understood the source,
but I obviously should have tried before writing it down :-(
Please find attached a correction. While SSLv23_* covers all three
protocols, SSLv2, SSLv3, and TLSv1, SSLv3 _only_ covers SSLv3 and not
TLSv1 even though a lot of the routines are shared.
Sorry,
Lutz
--
Lutz Jaenicke [EMAIL PROTECTED]
BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus Fax. +49 355 69-4153
diff -r -u openssl-SNAP-20001015-vanilla/doc/ssl/SSL_CTX_new.pod
openssl-SNAP-20001015/doc/ssl/SSL_CTX_new.pod
--- openssl-SNAP-20001015-vanilla/doc/ssl/SSL_CTX_new.pod Wed Sep 20 18:55:26
2000
+++ openssl-SNAP-20001015/doc/ssl/SSL_CTX_new.pod Thu Oct 19 14:17:35 2000
@@ -33,9 +33,9 @@
=item SSLv3_method(void), SSLv3_server_method(void), SSLv3_client_method(void)
A TLS/SSL connection established with these methods will only understand the
-SSLv3 and TLSv1 protocol. A client will send out SSLv3 client hello messages
-and will indicate that it also understands TLSv1. A server will only understand
-SSLv3 and TLSv1 client hello messages. This especially means, that it will
+SSLv3 protocol. A client will send out SSLv3 client hello messages
+and will indicate that it only understands SSLv3. A server will only understand
+SSLv3 client hello messages. This especially means, that it will
not understand SSLv2 client hello messages which are widely used for
compatibility reasons, see SSLv23_*_method().
@@ -46,7 +46,8 @@
and will indicate that it only understands TLSv1. A server will only understand
TLSv1 client hello messages. This especially means, that it will
not understand SSLv2 client hello messages which are widely used for
-compatibility reasons, see SSLv23_*_method().
+compatibility reasons, see SSLv23_*_method(). It will also not understand
+SSLv3 client hello messages.
=item SSLv23_method(void), SSLv23_server_method(void), SSLv23_client_method(void)
