Hello list,

given that I'm developing a custom client-server application that communicates via TLS, I decided to zero-out all options since I don't care about backwards compatibility and heterogenous clients like browsers by doing:

SSL_CTX_clear_options(ssl_ctx, SSL_CTX_get_options(ssl_ctx));

Can you think of reasons this might be bad practice? (e.g. openssl changing default behaviour in the future unless an option is set)


Thanks,
Dimitris

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to