diff -Naur a/openssl-1.0.1e/ssl/s23_clnt.c b/openssl-1.0.1e/ssl/s23_clnt.c --- a/openssl-1.0.1e/ssl/s23_clnt.c 2013-02-11 15:26:04.000000000 +0000 +++ b/openssl-1.0.1e/ssl/s23_clnt.c 2013-09-11 22:59:17.878115006 +0000 @@ -306,7 +306,7 @@ #endif ; #if !defined(OPENSSL_NO_TLS1_2_CLIENT) - version = TLS1_2_VERSION; + version = getenv("OPENSSL_NO_TLS1_2") ? TLS1_1_VERSION : TLS1_2_VERSION; if ((options & SSL_OP_NO_TLSv1_2) && (options & mask) != mask) version = TLS1_1_VERSION;