SSLv23_client_method supports all protocols by default and connects using
the highest protocol that server supports(as received from server hello)

I suggest you try disabling TLS 1.0 along with SSL2 if you want to force
your client to use SSL3 without changing the context's method.
SSL_CTX_set_options(ctx, SSL_OP_ALL|
                                                 SSL_OP_NO_SSLv2 |
                                                 SSL_OP_NO_TLSv1);

If the server supports TLS1.1 and TLS 1.2, update the client ctx option to
use SSL_OP_NO_TLSv1_1 and SSL_OP_NO_TLSv1_2 also.



On 12 September 2014 18:01, abhijit pai <abhijitpa...@gmail.com> wrote:

> Hello All,
>
> I am using openSSL in my custom HTTP client.
> Here I use SSLv23_client_method() and disable SSLv2 using
> SSL_CTX_set_options(ctx, SSL_OP_ALL| SSL_OP_NO_SSLv2)
>
> I would expect the handshake method sent out to the server be SSL v3.0
> but to my surprise it is TLS 1.0, which for some reasons the server
> does not support.
>
> This is a generic code, that would talk to even TLS 1.x enabled
> servers, so I cannot fix it using SSLv3_client_method().
>
> Is there any other API that I am not aware of that could help me achieve
> it?
>
> Thanks in advance!
>
>
> Regards,
> Abhijit
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    openssl-users@openssl.org
> Automated List Manager                           majord...@openssl.org
>

Reply via email to