TLS Version in Record Layer using OpenSSL 1.1.1

[Michael Lee]

Hello Matt Caswell:

Regarding your remark from https://mta.openssl.org/pipermail/openssl-users/2020-October/013081.html
Basically the record version is never greater than TLSv1.2. If we're in
an initial ClientHello (not a renegotiation or an HRR) and the max
version is > TLSv1.0 then the record version is fixed at TLSv1.0 for the
ClientHello record.

Do you know if this "fixed at TLSv1.0" restriction is relaxed with OpenSSL 3?
We have packets that are being blocked by firewall due to the TLS 1.0 signature.
We desperately need to change the Record Layer version to TLS 1.2 somehow.

Thanks!
-Mike Lee

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mta.openssl.org/pipermail/openssl-users/attachments/20230602/896fd7bf/attachment.htm>