libtls: Make min/max TLS version configurable
Except for the tls_test tool, the versions now default to those configured in strongswan.conf.
This commit is contained in:
@@ -85,7 +85,7 @@ static bool make_connection(private_pt_tls_client_t *this)
|
||||
}
|
||||
|
||||
this->tls = tls_socket_create(FALSE, this->server, this->client, fd,
|
||||
NULL, TLS_1_0, TLS_1_2, FALSE);
|
||||
NULL, TLS_UNSPEC, TLS_UNSPEC, FALSE);
|
||||
if (!this->tls)
|
||||
{
|
||||
close(fd);
|
||||
|
||||
@@ -532,8 +532,8 @@ pt_tls_server_t *pt_tls_server_create(identification_t *server, int fd,
|
||||
.destroy = _destroy,
|
||||
},
|
||||
.state = PT_TLS_SERVER_VERSION,
|
||||
.tls = tls_socket_create(TRUE, server, NULL, fd, NULL, TLS_1_0, TLS_1_2,
|
||||
FALSE),
|
||||
.tls = tls_socket_create(TRUE, server, NULL, fd, NULL, TLS_UNSPEC,
|
||||
TLS_UNSPEC, FALSE),
|
||||
.tnccs = (tls_t*)tnccs,
|
||||
.auth = auth,
|
||||
);
|
||||
|
||||
Reference in New Issue
Block a user