Re: SSLPolicy

2017-08-15 Thread Stefan Eissing
Woah! I just read ssl_init_ctx_protocol()...that's... quite something. So, basically, what our SSLProtocol does is - select the proper _new() variant for the SSL_CTX_new() - disable known protocol versions not set in our bitmask - set the max protocol version based on our bitmask What does that m

Re: SSLPolicy

2017-08-15 Thread Stefan Eissing
> Am 14.08.2017 um 17:14 schrieb Eric Covener : > >> I hope this looks attractive to you. All bugs are mine. Let me know what you >> think. > > It looks neat. I think accessible doc will be key. This is now addressed in v3 (attached below): I added DUMP code that lists all dfined SSLPolicy r