Boost C++ Libraries: Ticket #10690: Boost SSL protocols

component changed; owner set

anonymous — Thu, 23 Oct 2014 15:50:00 GMT

owner set to chris_kohlhoff
component None → asio

anonymous — Tue, 14 Jul 2015 00:04:56 GMT

Along similar lines.

SSLv2_method, SSLv2_server_method and SSLv2_client_method where removed in OpenSSL 1.1.0. SSLv23_method, SSLv23_server_method and SSLv23_client_method were deprecated and TLS_method, TLS_server_method and TLS_client_method were introduced in OpenSSL 1.1.0.

kurt@… — Mon, 02 Nov 2015 21:16:55 GMT

I suggest to only support the SSLv23_* or TLS_* methods. In the current master branch the SSLv23_* are defines for the TLS_* method. SSLv23_* was a confusing name. It was the only method that supported multiple SSL/TLS versions. All the other methods only support the version of the name. All those other methods have been dropped in the master branch from the headers, you should not use them.

anonymous — Tue, 16 Aug 2016 13:47:14 GMT

Replying to anonymous:

Hello,

I use Boost SSL socket. I want to disable the TLS security protocol so I use set_options like this:

m_context.set_options(ssl::context::no_tlsv1);

But it only disables TLSv1, not TLSv1.1 and TLSv1.2. I looked at the boost source code and I saw this :

BOOST_ASIO_STATIC_CONSTANT(long, no_tlsv1 = SSL_OP_NO_TLSv1);

Why SSL_OP_NO_TLSv1_1 and SSL_OP_NO_TLSv1_2 are not wrapped ?

Thx