SSLv23_client_method supports all protocols by default and connects using the highest protocol that server supports(as received from server hello)
I suggest you try disabling TLS 1.0 along with SSL2 if you want to force your client to use SSL3 without changing the context's method. SSL_CTX_set_options(ctx, SSL_OP_ALL| SSL_OP_NO_SSLv2 | SSL_OP_NO_TLSv1); If the server supports TLS1.1 and TLS 1.2, update the client ctx option to use SSL_OP_NO_TLSv1_1 and SSL_OP_NO_TLSv1_2 also. On 12 September 2014 18:01, abhijit pai <abhijitpa...@gmail.com> wrote: > Hello All, > > I am using openSSL in my custom HTTP client. > Here I use SSLv23_client_method() and disable SSLv2 using > SSL_CTX_set_options(ctx, SSL_OP_ALL| SSL_OP_NO_SSLv2) > > I would expect the handshake method sent out to the server be SSL v3.0 > but to my surprise it is TLS 1.0, which for some reasons the server > does not support. > > This is a generic code, that would talk to even TLS 1.x enabled > servers, so I cannot fix it using SSLv3_client_method(). > > Is there any other API that I am not aware of that could help me achieve > it? > > Thanks in advance! > > > Regards, > Abhijit > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager majord...@openssl.org >