[openssl-users] Disable SSL3 and enable TLS1? / Ambiguous "DES-CBC3-SHA"
openssl-users at dukhovni.org
Tue Apr 7 02:44:13 UTC 2015
On Mon, Apr 06, 2015 at 05:11:22PM -0700, David Rueter wrote:
> I would like to disable SSL3 (to prevent POODLE attacks), but I would like
> to leave TLS1 enabled (particularly DES-CBC3-SHA, AES128-SHA and
You're confusing SSLv3 the protocol, with SSLv3 ciphersuites. To disable
the protocol set "SSL_OP_NO_SSLv3" via SSL_CTX_set_options().
> Is there no way to disable SSL3 while leaving TLS_RSA_WITH_3DES_EDE_CBC_SHA
Yes, disable the protocol, not the ciphers.
More information about the openssl-users