[stunnel-users] How to disable SSLv2

[Michal Trojnara]

On Friday 27 October 2006 17:48, Tommi Nieminen wrote:
> options = SSL_OP_NO_SSLv2

Did you read the fine manual?
http://stunnel.mirt.net/static/stunnel.html

     options = SSL_options

           OpenSSL library options

           The parameter is the OpenSSL option name as described in
           the SSL_CTX_set_options(3ssl) manual, but without
           SSL_OP_ prefix.  Several options can be used to specify
           multiple options.

           For example for compatibility with erroneous Eudora SSL
           implementation the following option can be used:

               options = DONT_INSERT_EMPTY_FRAGMENTS

so the answer is:
options = NO_SSLv2

Best regards,
    Mike
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20061027/f8b0ceb2/attachment.sig>