> Thanks.  In particular, since SSL_OP_ALL is a compile-time constant, 
> applications compiled with older releases will not send the extension by 
> default.  Only applications compiled against 1.0.1g or later that use 
> SSL_OP_ALL, or specifically enable this work-around, will send the extension.

Perhaps SSSL_OP_ALL should be ~0 cast appropriately. 

--  
Principal Security Engineer
Akamai Technologies, Cambridge, MA
IM: rs...@jabber.me; Twitter: RichSalz

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to