[openSSL] How to get successful connection

["'Keonho Lee' via openssl-users" <openssl-users@xxxxxxxxxxx>]

Hello All,

I have an issue about TLS handshaking.

I'm using OpenSSL 3.0.10 1 Aug 2023.

[Scenarios]

1. Client sends 'Client hello' with Version TLS1.2.

Version: TLS 1.2 (0x0303)

2. Server responds 'Server hello' with Version TLS1.0.

Version: TLS 1.0 (0x0301)

3. Client act with 'fatal' like below.

Transport Layer Security

    TLSv1 Record Layer: Alert (Level: Fatal, Description: Protocol Version)

        Content Type: Alert (21)

        Version: TLS 1.2 (0x0303)

        Length: 2

        Alert Message

            Level: Fatal (2)

            Description: Protocol Version (70)

I already set minimum TLS version to TLS1.0 with SSL_CTX_set_min_proto_version.

How could I get success in this situation?

Do I have misconfiguration?

BR,

KH.Lee.

Keonho Lee Sr. SW Engineer, R&D Dept. +82 2 368 4686 +82 10 3437 4972
This electronic message, including attachments, is intended only for the use of the individual or company named above or to which it is addressed. The information contained in this message shall be considered confidential and proprietary, and may include confidential work product. If you are not the intended recipient, please be aware that any unauthorized use, dissemination, distribution or copying of this message is strictly prohibited. If you have received this email in error, please notify the sender by replying to this message and deleting this email immediately. To the extent this email includes an offer to buy Telit Cinterion products or an order confirmation, the offer or order confirmation is governed by Telit Cinterion’s General Terms and Conditions of Sale, which are published here. You can refer to our Privacy Policy to see how Telit Cinterion protects your personal information.

--
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe@xxxxxxxxxxx.
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/PAXPR06MB840545BE073242C1E303480F9F2E2%40PAXPR06MB8405.eurprd06.prod.outlook.com.