NAME¶

SSL_CTX_set_ssl_version, SSL_set_ssl_method, SSL_CTX_get_ssl_method, SSL_get_ssl_method — choose a new TLS/SSL method

SYNOPSIS¶

#include <openssl/ssl.h>

int
SSL_CTX_set_ssl_version(SSL_CTX *ctx, const SSL_METHOD *method);

int
SSL_set_ssl_method(SSL *s, const SSL_METHOD *method);

const SSL_METHOD *
SSL_CTX_get_ssl_method(SSL_CTX *ctx);

const SSL_METHOD *
SSL_get_ssl_method(SSL *ssl);

DESCRIPTION¶

SSL_CTX_set_ssl_version() sets a new default TLS/SSL method for SSL objects newly created from this ctx. SSL objects already created with SSL_new(3) are not affected, except when SSL_clear(3) is called.

SSL_set_ssl_method() sets a new TLS/SSL method for a particular SSL object s. It may be reset when SSL_clear(3) is called.

SSL_CTX_get_ssl_method() and SSL_get_ssl_method() return a function pointer to the TLS/SSL method set in ctx and ssl, respectively.

The available method choices are described in SSL_CTX_new(3).

When SSL_clear(3) is called and no session is connected to an SSL object, the method of the SSL object is reset to the method currently set in the corresponding SSL_CTX object.

RETURN VALUES¶

The following return values can occur for SSL_CTX_set_ssl_version() and SSL_set_ssl_method():

0

The new choice failed. Check the error stack to find out the reason.

1

The operation succeeded.

SEE ALSO¶

ssl(3), SSL_clear(3), SSL_CTX_new(3), SSL_new(3), SSL_set_connect_state(3)

HISTORY¶

SSL_CTX_set_ssl_version(), SSL_set_ssl_method(), and SSL_get_ssl_method() first appeared in SSLeay 0.8.0 and have been available since OpenBSD 2.4. SSL_CTX_get_ssl_method() first appeared in OpenSSL 1.1.0 and has been available since OpenBSD 7.0.