troglobit/inadyn — pull request #60 by ThomasWaldmann (2014-09-27 19:46:10+00:00)
Title: fixed ability to connect to servers that do not support SSLv3

SSLv3 is outdated and considered insecure, so you have to expect servers
not supporting it. If you ever modify the default cipher list, make sure you
do not include any SSLv2 ciphersuites (which are even more outdated and
insecure).

From the docs (I only quoted the stuff relevant to clients):

SSLv3_client_method(void)

A TLS/SSL connection established with these methods will only understand
the SSLv3 protocol. [...]

SSLv23_client_method(void)

A TLS/SSL connection established with these methods may understand the
SSLv2, SSLv3, TLSv1, TLSv1.1 and TLSv1.2 protocols.

If the cipher list does not contain any SSLv2 ciphersuites (the default
cipher list does not) or extensions are required (for example server name)
a client will send out TLSv1 client hello messages including extensions
and will indicate that it also understands TLSv1.1, TLSv1.2 and permits a
fallback to SSLv3.
This is the best choice when compatibility is a concern.