5 SSL_CTX_set_ssl_version, SSL_CTX_get_ssl_method, SSL_set_ssl_method, SSL_get_ssl_method
6 - choose a new TLS/SSL method
10 #include <openssl/ssl.h>
12 int SSL_CTX_set_ssl_version(SSL_CTX *ctx, const SSL_METHOD *method);
13 const SSL_METHOD *SSL_CTX_get_ssl_method(const SSL_CTX *ctx);
15 int SSL_set_ssl_method(SSL *s, const SSL_METHOD *method);
16 const SSL_METHOD *SSL_get_ssl_method(const SSL *ssl);
20 SSL_CTX_set_ssl_version() sets a new default TLS/SSL B<method> for SSL objects
21 newly created from this B<ctx>. Most of the configuration attached to the
22 SSL_CTX object is retained, with the exception of the configured TLS ciphers,
23 which are reset to the default values. SSL objects already created from this
24 SSL_CTX with L<SSL_new(3)> are not affected, except when L<SSL_clear(3)> is
25 being called, as described below.
27 SSL_CTX_get_ssl_method() returns the SSL_METHOD which was used to construct the
30 SSL_set_ssl_method() sets a new TLS/SSL B<method> for a particular B<ssl>
31 object. It may be reset, when SSL_clear() is called.
33 SSL_get_ssl_method() returns a pointer to the TLS/SSL method
38 The available B<method> choices are described in
41 When L<SSL_clear(3)> is called and no session is connected to
42 an SSL object, the method of the SSL object is reset to the method currently
43 set in the corresponding SSL_CTX object.
45 SSL_CTX_set_version() has unusual semantics and no clear use case;
46 it would usually be preferable to create a new SSL_CTX object than to
47 try to reuse an existing one in this fashion. Its usage is considered
50 SSL_set_ssl_method() cannot be used to change a non-QUIC SSL object to a QUIC
51 SSL object or vice versa.
55 The following return values can occur for SSL_CTX_set_ssl_version()
56 and SSL_set_ssl_method():
62 The new choice failed, check the error stack to find out the reason.
66 The operation succeeded.
70 SSL_CTX_get_ssl_method() and SSL_get_ssl_method() always return non-NULL
75 L<SSL_CTX_new(3)>, L<SSL_new(3)>,
76 L<SSL_clear(3)>, L<ssl(7)>,
77 L<SSL_set_connect_state(3)>
81 SSL_CTX_set_ssl_version() was deprecated in OpenSSL 3.0.
85 Copyright 2000-2022 The OpenSSL Project Authors. All Rights Reserved.
87 Licensed under the Apache License 2.0 (the "License"). You may not use
88 this file except in compliance with the License. You can obtain a copy
89 in the file LICENSE in the source distribution or at
90 L<https://www.openssl.org/source/license.html>.