AARGH. You *cannot* just set or clear them all...
-- Principal Security Engineer Akamai Technologies, Cambridge, MA IM: rs...@jabber.me; Twitter: RichSalz -----Original Message----- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Salz, Rich Sent: Wednesday, June 11, 2014 3:04 PM To: openssl-users@openssl.org Subject: RE: SSL_CTX_clear_options(ssl_ctx, SSL_CTX_get_options(ssl_ctx)) The subtle issue is that some option settings *enable* behavior, and some option settings *disable* behavior. You can just set/clear them all and really expect something good to happen. /r$ -- Principal Security Engineer Akamai Technologies, Cambridge, MA IM: rs...@jabber.me; Twitter: RichSalz ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
