Re: [SM-imapproxy] [PATCH] TLS improvements

[<ma...@ne...>]

Brad Smith <br...@co...> wrote:

> Personally I'd like to see an option to be able to control which 
> versions are enabled.

Using SSLv23_client_method() need to explicitely disable protocol
versions we do not want. But the problem is that we can only disable the
versions we know about.  

If we add the option you suggest, it will be unable to exclude TLSv1.3
the day it will come.

What problem do you expect to fix with such an option?

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
ma...@ne...