Another OpenSSL option to consider: security level

Gary E. Miller gem at rellim.com
Thu Feb 14 05:29:03 UTC 2019


Yo Hal!

On Wed, 13 Feb 2019 17:31:48 -0800
Hal Murray via devel <devel at ntpsec.org> wrote:

> More info via man SSL_CTX_get_security_level
> 
> The default seems appropriate for now.  Some people might want to
> tighten things up.

Or, loosen them up.  Default is 1.  You need to set to 0 to use
the null cipher for testing.

RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97703
	gem at rellim.com  Tel:+1 541 382 8588

	    Veritas liberabit vos. -- Quid est veritas?
    "If you can’t measure it, you can’t improve it." - Lord Kelvin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 851 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ntpsec.org/pipermail/devel/attachments/20190213/2652efe6/attachment.bin>


More information about the devel mailing list