Description
I'm somewhat in the middle of some other coding tasks, but I just noticed that
when using 2.1.0.beta1, SSLContext::METHODS is contains
SSLv2 SSLv23 SSLv3 TLSv1 TLSv1_1 TLSv1_2
when using 2.0.5, SSLContext::METHODS contains
SSLv23 TLSv1 TLSv1_1 TLSv1_2
Note that SSLv2
and SSLv3
appear in 2.1.0 but not 2.0.5. I'm using 1.1.0f, and I thought the OpenSSL package was build with SSL disabled. I run a daily Appveyor with info helpful for Ruby, the trunk builds are all the way at the bottom. See the OpenSSL section, 2.1.0.beta1 here and 2.0.5 here.
I checked History.md, the only thing I saw related to SSLContext::Methods was 'OpenSSL::SSL::SSLContext#min_version= and #max_version= are added. [GitHub #142]'
Not super knowledgeable about SSL, but this seems kind of odd...
EDIT: Just found some notes:
1.1.0f package used for above builds (shows no SSL versions):
>openssl ciphers -help
Usage: ciphers [options]
Valid options are:
-help Display this summary
-v Verbose listing of the SSL/TLS ciphers
-V Even more verbose
-s Only supported ciphers
-tls1 TLS1 mode
-tls1_1 TLS1.1 mode
-tls1_2 TLS1.2 mode
-psk include ciphersuites requiring PSK
-srp include ciphersuites requiring SRP
Same command with a 1.0.2l package (shows SSLv2 & SSLv3):
>openssl ciphers -help
usage: ciphers args
-v - verbose mode, a textual listing of the SSL/TLS ciphers in OpenSSL
-V - even more verbose
-ssl2 - SSL2 mode
-ssl3 - SSL3 mode
-tls1 - TLS1 mode