Apparently, TLSv1_client_method() is used for historical reasons.
This behavior is no longer helpful if we want to know what ciphers
a TLS connection could use. This could change again after further
investigation of what the behavior should be...
ok beck jsing
-/* $OpenBSD: ciphers.c,v 1.11 2022/07/14 08:07:54 tb Exp $ */
+/* $OpenBSD: ciphers.c,v 1.12 2022/07/14 08:35:15 tb Exp $ */
/*
* Copyright (c) 2014 Joel Sing <jsing@openbsd.org>
*
return (1);
}
- if ((ssl_ctx = SSL_CTX_new(TLSv1_client_method())) == NULL)
+ if ((ssl_ctx = SSL_CTX_new(TLS_client_method())) == NULL)
goto err;
if (cipherlist != NULL) {