On Fri, Jun 15, 2012, Erik Forsberg wrote:
> To answer my own question, seems the code that generates the
> SSL_CIPHER_description() output does not make any difference between SSLv3,
> TLSv1.0
> and TLSv1.1. Only TLSv1.2 is displayed as such. So in my case, I probably
> did have a TLSv1 connectio
that TLSv1 in the cipher string disables
TLSv1.2 ciphers ? I didnt expect that.
>-- Original Message --
>Date: Fri, 15 Jun 2012 14:34:27 -0700
>From: "Erik Forsberg"
>Subject: How does cipher selection and TLS protocol negotiation interact
>To: openssl-users@openssl.org
I have a weird case that I cannot properly explain.
Using OpenSSL 1.0.1c for both client and server, I was testing various
combinations of ciphers and protocol version requests.
Basically, the server uses SSLv23_server_method().
The client code uses SSLv23_client_method() and SSL_OP_NO_SSLv2
Then