Re: SSL v3.0 is not set as default protocol upon disabling v2.

2014-09-18 Thread abhijit pai
k to SSLv3 ... > > Cheers! > > - > John Lane Schultz > Spread Concepts LLC > Cell: 443 838 2200 > > On Sep 16, 2014, at 12:36 PM, abhijit pai wrote: > > Hi Thulasi, > > Thanks for the response. > But my point is little different here. I have a generic

Re: SSL v3.0 is not set as default protocol upon disabling v2.

2014-09-16 Thread abhijit pai
SSL_OP_NO_SSLv2 | > SSL_OP_NO_TLSv1); > > If the server supports TLS1.1 and TLS 1.2, update the client ctx option to > use SSL_OP_NO_TLSv1_1 and SSL_OP_NO_TLSv1_2 also. On Fri, Sep 12, 2014 at 6:01 PM, abhijit pai wrote: > Hello All, > > I

SSL v3.0 is not set as default protocol upon disabling v2.

2014-09-13 Thread abhijit pai
Hello All, I am using openSSL in my custom HTTP client. Here I use SSLv23_client_method() and disable SSLv2 using SSL_CTX_set_options(ctx, SSL_OP_ALL| SSL_OP_NO_SSLv2) I would expect the handshake method sent out to the server be SSL v3.0 but to my surprise it is TLS 1.0, which for some reasons t