ssl_ctx_set_ssl_version(3) - Linux man page

Name

SSL_CTX_set_ssl_version, SSL_set_ssl_method, SSL_get_ssl_method - choose a new TLS/SSL method

Synopsis

#include <openssl/ssl.h>

int SSL_CTX_set_ssl_version(SSL_CTX *ctx, const SSL_METHOD *method);
int SSL_set_ssl_method(SSL *s, const SSL_METHOD *method);
const SSL_METHOD *SSL_get_ssl_method(SSL *ssl);

Description

SSL_CTX_set_ssl_version() sets a new default TLS/SSL method for SSL objects newly created from this ctx. SSL objects already created with ssl_new(3) are not affected, except when ssl_clear(3) is being called.

SSL_set_ssl_method() sets a new TLS/SSL method for a particular ssl object. It may be reset, when SSL_clear() is called.

SSL_get_ssl_method() returns a function pointer to the TLS/SSL method set in ssl.

Notes

The available method choices are described in ssl_ctx_new(3).

When ssl_clear(3) is called and no session is connected to an SSL object, the method of the SSL object is reset to the method currently set in the corresponding SSL_CTX object.

Return Values

The following return values can occur for SSL_CTX_set_ssl_version() and SSL_set_ssl_method():

0

The new choice failed, check the error stack to find out the reason.

1

The operation succeeded.

See Also

ssl_ctx_new(3), ssl_new(3), ssl_clear(3), ssl(3), ssl_set_connect_state(3)