SSL_CTX_SET_SSL_VERSION(3SSL)

📦
version 4.0.3 · 14 versions
, in ubuntu stonking

💖 SSL_CTX_SET_SSL_VERSION 💖

okay bestie, so this is a page from the OpenSSL fam (man page name: SSL_CTX_SET_SSL_VERSION), and it's all about choosing a new TLS/SSL method — like, picking the entire vibe of how your connection does handshakes. four functions, one lil squad. let's get into it 🫶

✨ NAME ✨

SSL_CTX_set_ssl_version, SSL_CTX_get_ssl_method, SSL_set_ssl_method, SSL_get_ssl_method — choose a new TLS/SSL method 💅

🌸 SYNOPSIS 🌸

#include <openssl/ssl.h>

int SSL_CTX_set_ssl_version(SSL_CTX *ctx, const SSL_METHOD *method);
const SSL_METHOD *SSL_CTX_get_ssl_method(const SSL_CTX *ctx);

int SSL_set_ssl_method(SSL *s, const SSL_METHOD *method);
const SSL_METHOD *SSL_get_ssl_method(const SSL *ssl);

🦋 DESCRIPTION 🦋

  • SSL_CTX_set_ssl_version() — sets a brand new default TLS/SSL method for any SSL objects that get newly created from this ctx. here's the tea though: most of the config attached to the SSL_CTX object is retained, except the configured TLS ciphers, which get reset back to their default values 😭. and any SSL objects you already made from this SSL_CTX with SSL_new(3)? they are not affected — unless SSL_clear(3) gets called, which we'll get into below.
  • SSL_CTX_get_ssl_method() — hands you back the SSL_METHOD that was used to construct the SSL_CTX. it's giving receipts ✨
  • SSL_set_ssl_method() — sets a new TLS/SSL method for one specific ssl object. it may get reset when SSL_clear() is called, so like, don't be shocked.
  • SSL_get_ssl_method() — returns a pointer to the TLS/SSL method that's set in ssl. king behavior 👑

👑 NOTES 👑

the available method choices are all described over in SSL_CTX_new(3), so go peek at that if you're shopping around.

when SSL_clear(3) is called and no session is connected to an SSL object, the method of the SSL object gets reset to the method currently set in the corresponding SSL_CTX object. it's giving back to factory settings ngl.

⚠️ SSL_CTX_set_version() has unusual semantics and no clear use case; it would usually be preferable to create a new SSL_CTX object than to try to reuse an existing one in this fashion. Its usage is considered deprecated. so like... don't. fr fr 💀

also: SSL_set_ssl_method() cannot be used to change a non-QUIC SSL object to a QUIC SSL object or vice versa, or change a QUIC SSL object from one QUIC method to another. no crossover episodes allowed, periodt.

💀 RETURN VALUES 💀

here's what SSL_CTX_set_ssl_version() and SSL_set_ssl_method() can hand back to you:

  • 0 — the new choice failed 😭 check the error stack to find out the reason.
  • 1 — the operation succeeded 🎉 ate and left no crumbs.

and for the getter girlies: SSL_CTX_get_ssl_method() and SSL_get_ssl_method() always return non-NULL pointers. always. no cap 🫶

🌈 SEE ALSO 🌈

⭐ HISTORY ⭐

SSL_CTX_set_ssl_version() was deprecated in OpenSSL 3.0. it's retired bestie, let it rest 😌

Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

okay that's the whole page bestie, you're officially a TLS/SSL method connoisseur 💅 this was page 4.0.3, dated 2026-09-29 — mwah, go slay some handshakes 🌸✨

📦 where this page comes from