Re: Using SSL_CTX_set_min_proto_version

2021-04-07 Thread Matt Caswell
On 07/04/2021 15:22, Tamara Kogan via openssl-users wrote: I have not found any confirmation in TLS specs that the “record layer” version must be 1.0. I did not mean to imply that the specs say that the record layer version *must* be 1.0. Only that that is what OpenSSL *does*. In fact the

Re: Using SSL_CTX_set_min_proto_version

2021-04-07 Thread Tamara Kogan via openssl-users
> From: Matt Caswell > Subject: Re: Using SSL_CTX_set_min_proto_version > Date: April 6, 2021 at 2:13:02 PM EDT > To: openssl-users@openssl.org > > > On 06/04/2021 18:45, Tamara Kogan via openssl-users wrote: >> Hello, >> In our client application we are try

Re: Using SSL_CTX_set_min_proto_version

2021-04-06 Thread Matt Caswell
On 06/04/2021 18:45, Tamara Kogan via openssl-users wrote: Hello,  In our client application we are trying to set TLS 1.2 in ClientHello message. The OpenSSL version is 1.1.1h We use the function SSL_CTX_set_min_proto_version(ssl->ctx, TLS1_2_VERSION); If I test the version right after s

Using SSL_CTX_set_min_proto_version

2021-04-06 Thread Tamara Kogan via openssl-users
Hello, In our client application we are trying to set TLS 1.2 in ClientHello message. The OpenSSL version is 1.1.1h We use the function SSL_CTX_set_min_proto_version(ssl->ctx, TLS1_2_VERSION); If I test the version right after setting it does return 1.2 SSL_CTX_get_proto_version(ssl->ctx) == TLS