openssl

A TLS/SSL connection established with these methods will understand the SSLv2, SSLv3, and TLSv1 protocol. A client will send out SSLv2 client hello messages and will indicate that it also understands SSLv3 and TLSv1. A server will understand SSLv2, SSLv3, and TLSv1 client hello messages. This is the best choice when compatibility is a concern.

客户端先发送ssl v2，服务端可以再选择协议，如：可以使用TLS应答。

SSL_CTX_new(SSLv23_method())

The list of protocols available can later be limited using the SSL_OP_NO_SSLv2, SSL_OP_NO_SSLv3, SSL_OP_NO_TLSv1 options of the SSL_CTX_set_options() orSSL_set_options() functions. Using these options it is possible to choose e.g. SSLv23_server_method() and be able to negotiate with all possible clients, but to only allow newer protocols like SSLv3 or TLSv1.

flags = (SSL_OP_ALL | SSL_OP_NO_SSLv2);
SSL_CTX_set_options(soap->ctx, flags); ----- 可以设置为不选择ssl v2，因为v2有缺陷。

ACE 里面如何设置ssl的压缩算法？

SSL_CTX_use_certificate_file  --- 读取证书。如在-----BEGIN CERTIFICATE-----和-----END CERTIFICATE-----中指定。

SSL_CTX_use_PrivateKey_file --- 读取私钥。如在-----BEGIN RSA PRIVATE KEY-----和-----END RSA PRIVATE KEY-----中指定。