On 10/11/14 12:38, Kurt Roeckx wrote:
> I would also like to get rid of SSL_OP_NO_SSLv2 and instead have a
> way to specify the minimum and maximum supported version by those
> methods, because that's really what people want to do as far as I
> know.

The default should assume the maximum supported (probably with an option
to override that if you really do wish to specify a maximum).

That way as the OpenSSL gets updated over time (e.g. to support TLS1.3)
then code will not have to be updated...just update to the latest
library version.

Matt

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to