I have a site that the SSL test reports that SSLv3 is turned off. However, other tests, such as openssl claim it is turned on. And if I tell the browser not to connect with TLS (any version), it connects using SSLv3. How does SSLlabs test for SSLv3?
SSL Labs tests for protocol version support by attempting SSL handshake with given protocol. Please PM the sitename if SSL Labs shows the false negative.If site supports SSL3 it should connect with following command
openssl s_client -connect example.com:443 -ssl3
Retrieving data ...