2001-02-23 21:05:56 +00:00
|
|
|
=pod
|
|
|
|
|
|
|
|
=head1 NAME
|
|
|
|
|
2017-03-28 05:33:54 +00:00
|
|
|
SSL_client_version, SSL_get_version, SSL_is_dtls, SSL_version - get the
|
|
|
|
protocol information of a connection
|
2001-02-23 21:05:56 +00:00
|
|
|
|
|
|
|
=head1 SYNOPSIS
|
|
|
|
|
|
|
|
#include <openssl/ssl.h>
|
|
|
|
|
2017-03-28 05:33:54 +00:00
|
|
|
int SSL_client_version(const SSL *s);
|
|
|
|
|
2005-03-30 11:50:14 +00:00
|
|
|
const char *SSL_get_version(const SSL *ssl);
|
2001-02-23 21:05:56 +00:00
|
|
|
|
2016-06-08 15:37:06 +00:00
|
|
|
int SSL_is_dtls(const SSL *ssl);
|
|
|
|
|
2017-03-28 05:33:54 +00:00
|
|
|
int SSL_version(const SSL *s);
|
|
|
|
|
2001-02-23 21:05:56 +00:00
|
|
|
=head1 DESCRIPTION
|
|
|
|
|
2018-09-03 10:57:33 +00:00
|
|
|
SSL_client_version() returns the numeric protocol version advertised by the
|
|
|
|
client in the legacy_version field of the ClientHello when initiating the
|
|
|
|
connection. Note that, for TLS, this value will never indicate a version greater
|
|
|
|
than TLSv1.2 even if TLSv1.3 is subsequently negotiated. SSL_get_version()
|
|
|
|
returns the name of the protocol used for the connection. SSL_version() returns
|
|
|
|
the numeric protocol version used for the connection. They should only be called
|
|
|
|
after the initial handshake has been completed. Prior to that the results
|
|
|
|
returned from these functions may be unreliable.
|
2001-02-23 21:05:56 +00:00
|
|
|
|
2016-06-08 15:37:06 +00:00
|
|
|
SSL_is_dtls() returns one if the connection is using DTLS, zero if not.
|
|
|
|
|
2001-02-23 21:05:56 +00:00
|
|
|
=head1 RETURN VALUES
|
|
|
|
|
2018-09-03 10:57:33 +00:00
|
|
|
|
2016-06-09 21:02:59 +00:00
|
|
|
SSL_get_version() returns one of the following strings:
|
2001-02-23 21:05:56 +00:00
|
|
|
|
|
|
|
=over 4
|
|
|
|
|
|
|
|
=item SSLv3
|
|
|
|
|
|
|
|
The connection uses the SSLv3 protocol.
|
|
|
|
|
|
|
|
=item TLSv1
|
|
|
|
|
2014-07-03 02:42:40 +00:00
|
|
|
The connection uses the TLSv1.0 protocol.
|
|
|
|
|
|
|
|
=item TLSv1.1
|
|
|
|
|
|
|
|
The connection uses the TLSv1.1 protocol.
|
|
|
|
|
|
|
|
=item TLSv1.2
|
|
|
|
|
|
|
|
The connection uses the TLSv1.2 protocol.
|
2001-02-23 21:05:56 +00:00
|
|
|
|
2017-03-28 05:33:54 +00:00
|
|
|
=item TLSv1.3
|
|
|
|
|
|
|
|
The connection uses the TLSv1.3 protocol.
|
|
|
|
|
2001-02-23 21:05:56 +00:00
|
|
|
=item unknown
|
|
|
|
|
2018-04-19 12:32:45 +00:00
|
|
|
This indicates an unknown protocol version.
|
2001-02-23 21:05:56 +00:00
|
|
|
|
|
|
|
=back
|
|
|
|
|
2018-09-03 10:57:33 +00:00
|
|
|
SSL_version() and SSL_client_version() return an integer which could include any
|
|
|
|
of the following:
|
2017-03-28 05:33:54 +00:00
|
|
|
|
2017-04-03 19:39:09 +00:00
|
|
|
=over 4
|
2017-03-28 05:33:54 +00:00
|
|
|
|
|
|
|
=item SSL3_VERSION
|
|
|
|
|
|
|
|
The connection uses the SSLv3 protocol.
|
|
|
|
|
|
|
|
=item TLS1_VERSION
|
|
|
|
|
|
|
|
The connection uses the TLSv1.0 protocol.
|
|
|
|
|
|
|
|
=item TLS1_1_VERSION
|
|
|
|
|
|
|
|
The connection uses the TLSv1.1 protocol.
|
|
|
|
|
|
|
|
=item TLS1_2_VERSION
|
|
|
|
|
|
|
|
The connection uses the TLSv1.2 protocol.
|
|
|
|
|
|
|
|
=item TLS1_3_VERSION
|
|
|
|
|
2018-09-03 10:57:33 +00:00
|
|
|
The connection uses the TLSv1.3 protocol (never returned for
|
|
|
|
SSL_client_version()).
|
2017-03-28 05:33:54 +00:00
|
|
|
|
2017-04-03 19:30:20 +00:00
|
|
|
=back
|
|
|
|
|
2001-02-23 21:05:56 +00:00
|
|
|
=head1 SEE ALSO
|
|
|
|
|
2016-11-11 08:33:09 +00:00
|
|
|
L<ssl(7)>
|
2001-02-23 21:05:56 +00:00
|
|
|
|
2016-06-08 15:37:06 +00:00
|
|
|
=head1 HISTORY
|
|
|
|
|
2018-12-09 00:02:36 +00:00
|
|
|
The SSL_is_dtls() function was added in OpenSSL 1.1.0.
|
2016-06-08 15:37:06 +00:00
|
|
|
|
2016-05-18 15:44:05 +00:00
|
|
|
=head1 COPYRIGHT
|
|
|
|
|
2018-05-01 12:34:30 +00:00
|
|
|
Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
|
2016-05-18 15:44:05 +00:00
|
|
|
|
|
|
|
Licensed under the OpenSSL license (the "License"). You may not use
|
|
|
|
this file except in compliance with the License. You can obtain a copy
|
|
|
|
in the file LICENSE in the source distribution or at
|
|
|
|
L<https://www.openssl.org/source/license.html>.
|
|
|
|
|
|
|
|
=cut
|