libtls: Make min/max TLS version configurable

Except for the tls_test tool, the versions now default to those configured in strongswan.conf.
2021-02-12 14:35:23 +01:00
parent 9389fef78a
commit 663969ddf7
9 changed files with 99 additions and 29 deletions
@@ -473,6 +473,12 @@ charon.tls.mac
 charon.tls.suites
 	List of TLS cipher suites.

+charon.tls.version_min = 1.0
+	Minimum TLS version to negotiate.
+
+charon.tls.version_max = 1.3
+	Maximum TLS version to negotiate.
+
 charon.user
 	Name of the user the daemon changes to after startup.