Need inputs/suggestions on SSL/TLS protocol version fallback mechanism.

2012-10-29 Thread Bhat, Jayalakshmi Manjunath
Hi All, I have a client application that uses SSL23_client_method(). When the client is getting connected to server that supports TLS 1.0 there are no issues. When the client is getting connected to server that supports only SSLv3.0, connection is getting aborted with protocol number error. I

RE: Need inputs/suggestions on SSL/TLS protocol version fallback mechanism.

2012-10-29 Thread Charles Mills
...@openssl.org] On Behalf Of Bhat, Jayalakshmi Manjunath Sent: Monday, October 29, 2012 5:27 AM To: openssl-...@openssl.org; openssl-users@openssl.org Subject: Need inputs/suggestions on SSL/TLS protocol version fallback mechanism. Hi All, I have a client application that uses

RE: Need inputs/suggestions on SSL/TLS protocol version fallback mechanism.

2012-10-29 Thread Bhat, Jayalakshmi Manjunath
:40 PM To: openssl-users@openssl.org Subject: RE: Need inputs/suggestions on SSL/TLS protocol version fallback mechanism. Do you call SSL_CTX_set_options() with bit flags (SSL_OP_ALL, SSL_OP_NO_SSLv3, etc.) to indicate the protocols you are willing to accept? BTW, openssl-users (not -dev

RE: Need inputs/suggestions on SSL/TLS protocol version fallback mechanism.

2012-10-29 Thread Charles Mills
: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Bhat, Jayalakshmi Manjunath Sent: Monday, October 29, 2012 7:28 AM To: openssl-users@openssl.org Subject: RE: Need inputs/suggestions on SSL/TLS protocol version fallback mechanism. Hi Charles, Thank you

RE: Need inputs/suggestions on SSL/TLS protocol version fallback mechanism.

2012-10-29 Thread Bhat, Jayalakshmi Manjunath
...@openssl.org] On Behalf Of Charles Mills Sent: Monday, October 29, 2012 8:47 PM To: openssl-users@openssl.org Subject: RE: Need inputs/suggestions on SSL/TLS protocol version fallback mechanism. You should at least look into it. I am not sure what the defaults are without looking at the docs

Re: Need inputs/suggestions on SSL/TLS protocol version fallback mechanism.

2012-10-29 Thread Jeffrey Walton
, October 29, 2012 7:40 PM To: openssl-users@openssl.org Subject: RE: Need inputs/suggestions on SSL/TLS protocol version fallback mechanism. Do you call SSL_CTX_set_options() with bit flags (SSL_OP_ALL, SSL_OP_NO_SSLv3, etc.) to indicate the protocols you are willing to accept? BTW, openssl

RE: Need inputs/suggestions on SSL/TLS protocol version fallback mechanism.

2012-10-29 Thread Bhat, Jayalakshmi Manjunath
-Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Jeffrey Walton Sent: Monday, October 29, 2012 11:05 PM To: openssl-users@openssl.org Subject: Re: Need inputs/suggestions on SSL/TLS protocol version fallback mechanism

RE: Need inputs/suggestions on SSL/TLS protocol version fallback mechanism.

2012-10-29 Thread Bhat, Jayalakshmi Manjunath
-Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Jeffrey Walton Sent: Monday, October 29, 2012 11:05 PM To: openssl-users@openssl.org Subject: Re: Need inputs/suggestions on SSL/TLS protocol version fallback mechanism