Re: backward compatibility for tls 1.2

2014-05-13 Thread Michel
Hi, Here is a related previous discussion with some more details : http://openssl.6102.n7.nabble.com/FW-Negotiating-TLS-1-0-from-1-2-td39516.html Le 13/05/2014 12:45, Gayathri Manoj a écrit : Hi All, I am planning to upgrade my tls connection from 1.0 to 1.2. I have made changes from the cli

Re: backward compatibility for tls 1.2

2014-05-13 Thread Jeffrey Walton
On Tue, May 13, 2014 at 6:45 AM, Gayathri Manoj wrote: > Hi All, > > I am planning to upgrade my tls connection from 1.0 to 1.2. I have made > changes from the client side and am able to see the client hello with tls > version 1.2. The server supports only 1.0 and the client is not falling back >

Re : backward compatibility for tls 1.2

2014-05-13 Thread nicolas . kox
hi this code should do the the trick on client side (for the "server" side, just replace client by "server") SSL_CTX* ctx = SSL_CTX_new(SSLv23_client_method()); SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv2|SSL_OP_NO_SSLv3); the SSLv23_client_method() method allows all protocols, then SSL_CTX_set

RE: backward compatibility for tls 1.2

2014-05-13 Thread Salz, Rich
Ø I am planning to upgrade my tls connection from 1.0 to 1.2. I have made changes from the client side and am able to see the client hello with tls version 1.2. The server supports only 1.0 and the client is not falling back to 1.0 and giving me a fatal that Protocol version alert. You have t