On Wed, Jun 11, 2014 at 03:15:06PM -0400, Salz, Rich wrote:

> You *cannot* just set or clear them all...

Except that SSL_OP_ALL is implicitly recommended, while no options
is the default.  This said "SSL_OP_ALL" is a compile-time constant,
which is a bit of a nuisance when the run-time library has additional
invisible option bits.

Any future improved alternative interface should use named options
(not bits) and should have an "ALL" name that operates on all the
(runtime) options.

-- 
        Viktor.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to