Boost logo

Boost Users :

Subject: [Boost-users] using ssl::context in boost 1.53 versions
From: dipti Burli (diptiburli21_at_[hidden])
Date: 2017-07-27 09:49:17


Hi ,

I am currently using boost 1.53 version. cannot upgrade to latest version.

Using ssl asio.

Here is my requirement.

I need to support tls1.1.and tls1.2 protocol in the server, but not tls1.0
 .
As there are no options for tls1.1. and tls1.2 ,and context is not present
with relevant tls1.1 and tls1.2 versions,

I created the ssl::context with tlsv1 method and used

long ssl_disallowed = SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 | SSL_OP_NO_TLSv1 |
SSL_OP_NO_TLSv1_1 | SSL_OP_NO_TLSv1_2;
       ssl_disallowed &= ~SSL_OP_NO_TLSv1_2;
       ssl_disallowed &= ~SSL_OP_NO_TLSv1_1;

       SSL_CTX_set_options(myBoostSslcontext.native_handle(),
ssl_disallowed|SSL_OP_SINGLE_DH_USE);

But handshake seems to be failing for any other versions other than tlsv1.

Can you please let me know how to I set the options so that my sserver can
accept tls connections on tls1.1 and tls1.2 with boost version 1.53.

Thanks in advance.
Dipti



Boost-users list run by williamkempf at hotmail.com, kalb at libertysoft.com, bjorn.karlsson at readsoft.com, gregod at cs.rpi.edu, wekempf at cox.net