On Tue, Apr 11, 2000 at 03:23:34PM +0300, Wirta, Ville wrote:
> Hi!
>
> I'm new with OpenSSL and I'd like to know why browsers can't connect to a
> server which initializes the SSL connection with SSLv3_server_method().
> SSLv2_server_method() and SSLv23_server_method() work fine with IE (40, 56,
> 128 bit), Netscape (56, 128) and opera 3.62. Is there some trick (some extra
> funktion call possible?) I'm not aware of?
>
> I'd like to prevent users from choosing SSLv2 and that is why
> SSLv23_server_method does'nt satisfy me :-)
Use SSLv23_server_method and then set SSL_OP_NO_SSLv2 with
off |= SSL_OP_ALL; /* Work around all known bugs */
off |= SSL_OP_NO_SSLv2;
SSL_CTX_set_options(ctx, off);
Best regards,
Lutz
--
Lutz Jaenicke [EMAIL PROTECTED]
BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus Fax. +49 355 69-4153
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
