On Sun, Aug 27, 2000 at 12:15:47AM -0400, Serge Paquin wrote: > > Hello. How could I go about writing a web client that tries and SSLv3 > connection and if it failes fall back onto SSLv2? With OpenSSL, you don't have to do it, the underlying code will do it for you. It depends on the ciphers that you set. See ssl-ciph.doc in ssleay.txt (around line 6000!). > At what point and how can I check if the server supports 3 or just 2? If you really want to do it in your code, you set the method to be one of meth = SSLv2_client_method() meth = SSLv23_client_method() meth = SSLv3_client_method() meth = TLSv1_client_method() and attempt to make a connection. If the v3 one fails, try again with v2, etc. apps/s_client.c is an example of the use of the calls. SSLv23_client_method() sends a modified v2 ClientHello which indicates that the client will do v3 if the server will. -- Eric Murray http://www.lne.com/ericm ericm at lne.com PGP keyid:E03F65E5 Consulting Security Architect ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
