[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openssl-users
Subject:    RE: Doubt regarding ssl options
From:       Michael Wojcik <Michael.Wojcik () microfocus ! com>
Date:       2022-01-31 14:34:03
Message-ID: DM6PR18MB27009D8939A35D5D61D77F39F9259 () DM6PR18MB2700 ! namprd18 ! prod ! outlook ! com
[Download RAW message or body]

> From: openssl-users <openssl-users-bounces@openssl.org> On Behalf Of Jan Just \
>                 Keijser
> Sent: Monday, 31 January, 2022 03:51
> To: Srinivas, Saketh (c) <ssrinivas@rbbn.com>; openssl-users@openssl.org
> Subject: Re: Doubt regarding ssl options

> On 31/01/22 10:27, Srinivas, Saketh (c) wrote:

> > what is the difference between  SSL_CTX_set_min_proto_version
> > and SSL_set_min_proto_version.

> The effect of SSL_CTX_set_min_proto_version and SSL_set_min_proto_version is
> exactly the same...

More generally: The difference between SSL_CTX_something and SSL_something is that \
the former operates on an SSL_CTX object, and the latter on an SSL object.

An SSL object controls an SSL connection (more or less). An SSL_CTX object is used to \
create one or more SSL objects; it serves as a template for those SSL objects.

So if you want to set "something" for multiple SSL objects you will create later, use \
the SSL_CTX_something function. If you only need to alter the properties of an \
existing SSL object, use the SSL_something function.

This is a fundamental aspect of the OpenSSL API.

-- 
Michael Wojcik


[prev in list] [next in list] [prev in thread] [next in thread]