[prev in list] [next in list] [prev in thread] [next in thread]
List: openssl-users
Subject: Re: [openssl-users] Building OpenSSL 1.0.1t without tls1.1 support?
From: "Short, Todd" <tshort () akamai ! com>
Date: 2016-08-25 12:21:15
Message-ID: 786204F1-1C75-40ED-91AC-B317EE987676 () akamai ! com
[Download RAW message or body]
[Attachment #2 (text/plain)]
1.0.1 is old, and not really supported, except some security fixes.
1.0.x does not provide the ability to compile out TLSv1.0 from 1.1 from 1.2.
The upcoming 1.1.x does.
If you disable tls1, then you've also disabled all later versions, so enable tlsv1 at \
config time and use the SSL options to enable/disable the protocols at run time.
--
-Todd Short
// tshort@akamai.com<mailto:tshort@akamai.com>
// "One if by land, two if by sea, three if by the Internet."
On Aug 22, 2016, at 3:08 PM, Scott Neugroschl \
<scott_n@xypro.com<mailto:scott_n@xypro.com>> wrote:
I've done a custom build of OpenSSL where I ran Configure with "no-ssl2" and \
"no-ssl3". I'd like to disable TLS1 and 1.1 if possible. Will the no-tls1 option \
disable just TLS1 or all TLS1.x protocols?
Thanks,
ScottN
--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
[Attachment #3 (text/html)]
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: \
after-white-space;" class=""> 1.0.1 is old, and not really supported, except some \
security fixes.<br class=""> <div class="">1.0.x does not provide the ability to \
compile out TLSv1.0 from 1.1 from 1.2.</div> <div class="">The upcoming 1.1.x \
does.</div> <div class=""></div>
<div class=""><br class="">
</div>
<div class="">If you disable tls1, then you've also disabled all later versions, so \
enable tlsv1 at config time and use the SSL options to enable/disable the protocols \
at run time.<br class=""> <div class=""><br class="">
</div>
<div class="">
<div class="">
<div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: \
start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; \
word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; \
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""> <div \
style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; \
text-indent: 0px; text-transform: none; white-space: normal; widows: auto; \
word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; \
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""> <div \
class="">--</div> <div class="">-Todd Short</div>
<div class="">// <a href="mailto:tshort@akamai.com" \
class="">tshort@akamai.com</a></div> <div class="">// "One if by land, two if by \
sea, three if by the Internet."</div> </div>
</div>
</div>
<br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Aug 22, 2016, at 3:08 PM, Scott Neugroschl <<a \
href="mailto:scott_n@xypro.com" class="">scott_n@xypro.com</a>> wrote:</div> <br \
class="Apple-interchange-newline"> <div class="">
<div class="WordSection1" style="page: WordSection1; font-family: Helvetica; \
font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; \
letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; \
text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; \
-webkit-text-stroke-width: 0px;"> <div style="margin: 0in 0in 0.0001pt; font-size: \
11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""> </o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, \
sans-serif;" class=""> I've done a custom build of OpenSSL where I ran Configure with \
"no-ssl2" and "no-ssl3". I'd like to disable TLS1 and 1.1 if possible. \
Will the no-tls1 option disable just TLS1 or all TLS1.x protocols?<o:p \
class=""></o:p></div> <div style="margin: 0in 0in 0.0001pt; font-size: 11pt; \
font-family: Calibri, sans-serif;" class=""> <o:p class=""> </o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, \
sans-serif;" class=""> Thanks,<o:p class=""></o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, \
sans-serif;" class=""> <o:p class=""> </o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, \
sans-serif;" class=""> ScottN<o:p class=""></o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, \
sans-serif;" class=""> <o:p class=""> </o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, \
sans-serif;" class=""> <o:p class=""> </o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, \
sans-serif;" class=""> <o:p class=""> </o:p></div>
</div>
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; \
font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: \
auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; \
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; \
display: inline !important;" class="">--<span \
class="Apple-converted-space"> </span></span><br style="font-family: Helvetica; \
font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; \
letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; \
text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; \
-webkit-text-stroke-width: 0px;" class=""> <span style="font-family: Helvetica; \
font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; \
letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; \
text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; \
-webkit-text-stroke-width: 0px; float: none; display: inline !important;" \
class="">openssl-users mailing list</span><br style="font-family: Helvetica; \
font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; \
letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; \
text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; \
-webkit-text-stroke-width: 0px;" class=""> <span style="font-family: Helvetica; \
font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; \
letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; \
text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; \
-webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">To \
unsubscribe:<span class="Apple-converted-space"> </span></span><a \
href="https://mta.openssl.org/mailman/listinfo/openssl-users" style="color: purple; \
text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: \
normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; \
orphans: auto; text-align: start; text-indent: 0px; text-transform: none; \
white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: \
0px;" class="">https://mta.openssl.org/mailman/listinfo/openssl-users</a></div> \
</blockquote> </div>
<br class="">
</div>
</div>
</div>
</body>
</html>
--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
--===============7436432369715765700==--
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic