SSL_CTX_set_ssl_version changes security level

NAKANO Takuho takotakot+openssl at gmail.com
Tue May 12 01:13:20 UTC 2020


> https://src.fedoraproject.org/rpms/openssl/blob/master/f/openssl-1.1.1-system-cipherlist.patch
> suggests (the ssl.h chunk) that this patch does force the use of the "system
> profile" as the default cipher list.

https://src.fedoraproject.org/rpms/openssl/blob/master/f/openssl.spec
"./Configure" with option below:
--system-ciphers-file=%{_sysconfdir}/crypto-policies/back-ends/openssl.config
this path is where I pointed.

Takuho


More information about the openssl-users mailing list