tls: Allow setting both minimum and maximum TLS versions

This allows to increase the initial minimum version and also prevents
sending a list of versions during retries when 1.3 was already
negotiated.
This commit is contained in:
Tobias Brunner
2021-02-12 11:45:44 +01:00
parent 2b6565c236
commit c4576a1f57
5 changed files with 25 additions and 24 deletions
+1 -1
View File
@@ -282,7 +282,7 @@ static status_t process_client_hello(private_tls_server_t *this,
}
rng->destroy(rng);
if (!this->tls->set_version(this->tls, version))
if (!this->tls->set_version(this->tls, version, version))
{
DBG1(DBG_TLS, "negotiated version %N not supported",
tls_version_names, version);