Re: [openssl-users] Query on API availability for openssl versions

2017-10-17 Thread Matt Caswell
On 17/10/17 10:01, Grace Priscilla Jero wrote: > Thank you Matt for the quick response. > For "2," does it mean that every cipher suite can operate in multiple > levels?  > I thought that there were specific set of cipher suites operating in > each of the levels. Not quite. The security levels l

Re: [openssl-users] Query on API availability for openssl versions

2017-10-17 Thread Jakob Bohm
The security levels are simply a classification of the cipher suites by quality.  Typically one would select all ciphers above a certain level. Most cipher suites work with all protocol levels >= a certain level, with SSL2 (dead) and TLS1.3 (future) being exceptions. Selecting something like "TLS

Re: [openssl-users] Query on API availability for openssl versions

2017-10-17 Thread Grace Priscilla Jero
Thank you Matt for the quick response. For "2," does it mean that every cipher suite can operate in multiple levels? I thought that there were specific set of cipher suites operating in each of the levels. Thanks, Grace On Tue, Oct 17, 2017 at 2:25 PM, Matt Caswell wrote: > > > On 17/10/17 09:2

Re: [openssl-users] Query on API availability for openssl versions

2017-10-17 Thread Matt Caswell
On 17/10/17 09:21, Grace Priscilla Jero wrote: > Hi All, > > 1) > The below APIs used to set the maximum and minimum versions are > available in 1.1.0f version of OPENSSL. > >  int SSL_CTX_set_min_proto_version(SSL_CTX *ctx, int version); >  int SSL_CTX_set_max_proto_version(SSL_CTX *ctx, int v

[openssl-users] Query on API availability for openssl versions

2017-10-17 Thread Grace Priscilla Jero
Hi All, 1) The below APIs used to set the maximum and minimum versions are available in 1.1.0f version of OPENSSL. int SSL_CTX_set_min_proto_version(SSL_CTX *ctx, int version); int SSL_CTX_set_max_proto_version(SSL_CTX *ctx, int version); int SSL_set_min_proto_version(SSL *ssl, int version);