SSL_CTX_SET_SSL_VERSION(3)

✨ SSL_CTX_SET_SSL_VERSION(3) ✨

okay bestie, this is a page from the Library Functions Manual for libssl, and it's genuinely iconic. it lives in libcrypto too (they're besties), and before you do literally anything you're gonna #include <openssl/ssl.h>. no cap. 💅

---

🌸 NAME 🌸

SSL_CTX_set_ssl_version, SSL_set_ssl_method, SSL_CTX_get_ssl_method, SSL_get_ssl_method — choose a new TLS/SSL method 🦋

---

🎀 SYNOPSIS 🎀

library “libssl” libcrypto #include <openssl/ssl.h>

int
SSL_CTX_set_ssl_version(SSL_CTX *ctx, const SSL_METHOD *method);

int
SSL_set_ssl_method(SSL *s, const SSL_METHOD *method);

const SSL_METHOD *
SSL_CTX_get_ssl_method(SSL_CTX *ctx);

const SSL_METHOD *
SSL_get_ssl_method(SSL *ssl);

---

💖 DESCRIPTION 💖

so. four functions. two of them set stuff, two of them get stuff. it's giving duality. ⭐

SSL_CTX_set_ssl_version() sets a new default TLS/SSL method for SSL objects that are newly created from this ctx. and here's the tea: SSL objects you already made with SSL_new(3) are not affected — except when SSL_clear(3) is called. so don't @ them, they're not listening 🙈

SSL_set_ssl_method() sets a new TLS/SSL method for one particular SSL object, s. it may be reset when SSL_clear(3) is called. yep, may. lowkey chaotic of it but okay.

SSL_CTX_get_ssl_method() and SSL_get_ssl_method() return a function pointer to the TLS/SSL method set in ctx and ssl, respectively. they're the read-only girlies. 👑

the available method choices are described in SSL_CTX_new(3) — go check that one out, it's a whole mood.

and the ✨plot twist✨: when SSL_clear(3) is called and no session is connected to an SSL object, the method of that SSL object gets reset to the method currently set in the corresponding SSL_CTX object. so it snaps back to the context's vibe. main character energy fr fr. 🌈

---

🔥 RETURN VALUES 🔥

the following return values can occur for SSL_CTX_set_ssl_version() and SSL_set_ssl_method():

• 0 — the new choice failed. check the error stack to find out the reason 👀 (the error stack is literally where the receipts are)
• 1 — the operation succeeded 🎉 slay

---

🫶 SEE ALSO 🫶

ssl(3), SSL_clear(3), SSL_CTX_new(3), SSL_new(3), SSL_set_connect_state(3)

all of these are worth a read, iykyk 💜

---

👑 HISTORY 👑

SSL_CTX_set_ssl_version(), SSL_set_ssl_method(), and SSL_get_ssl_method() first appeared in SSLeay 0.8.0 and have been available since OpenBSD 2.4. absolute elders. respect. 🧚

SSL_CTX_get_ssl_method() first appeared in OpenSSL 1.1.0 and has been available since OpenBSD 7.0. the baby of the group, and honestly? ate. 🍓

---

okay that's the whole page bestie, go forth and pick your methods wisely 😭💖

— written from the Debian edition, dated June 8, 2025, and it's literally titled SSL_CTX_SET_SSL_VERSION(3) in case you forgot what you were reading. mwah. 💅✨