Hello list,
given that I'm developing a custom client-server application that
communicates via TLS, I decided to zero-out all options since I don't care
about backwards compatibility and heterogenous clients like browsers by
doing:
SSL_CTX_clear_options(ssl_ctx, SSL_CTX_get_options(ssl_ctx));
Can you think of reasons this might be bad practice? (e.g. openssl
changing default behaviour in the future unless an option is set)
Thanks,
Dimitris
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org