[openssl-dev] How to get SSL version from SSL_SESSION using OpenSSL-1.1.x?

Viktor Dukhovni openssl-users at dukhovni.org
Thu May 26 22:14:48 UTC 2016


On Thu, May 26, 2016 at 09:58:09PM +0000, Viktor Dukhovni wrote:

> The following should work:
> 
>     const char *get_session_protocol(SSL_CTX *ctx, SSL_SESSION *session)
>     {
> 	const char *protocol;
> 	SSL_CTX *tmp_ctx = NULL;
> 
> 	/* Typically you'd pass in a suitable non-NULL ctx */
> 	if (ctx == NULL)
> 	    ctx = tmp_ctx = SSL_CTX_new(TLS_method());
> 
> 	ssl = SSL_new(ctx);
> 	SSL_set_session(ssl, session);
> 	protocol = SSL_get_version(ssl);
> 
> 	SSL_free(ssl);
> 	SSL_CTX_free(tmp_ctx);
> 
> 	return protocol;
>     }

But it does not, sorry about that.  The session version is not
directly copied to the SSL object.

-- 
	Viktor.


More information about the openssl-dev mailing list