tls: Support a maximum TLS version to negotiate using TLS socket abstraction

This commit is contained in:
Martin Willi
2014-04-01 14:28:55 +02:00
parent 5313880261
commit e15f64cc81
6 changed files with 9 additions and 7 deletions
+1 -1
View File
@@ -85,7 +85,7 @@ static bool make_connection(private_pt_tls_client_t *this)
}
this->tls = tls_socket_create(FALSE, this->server, this->client, fd,
NULL, FALSE);
NULL, TLS_1_2, FALSE);
if (!this->tls)
{
close(fd);
+1 -1
View File
@@ -532,7 +532,7 @@ pt_tls_server_t *pt_tls_server_create(identification_t *server, int fd,
.destroy = _destroy,
},
.state = PT_TLS_SERVER_VERSION,
.tls = tls_socket_create(TRUE, server, NULL, fd, NULL, FALSE),
.tls = tls_socket_create(TRUE, server, NULL, fd, NULL, TLS_1_2, FALSE),
.tnccs = (tls_t*)tnccs,
.auth = auth,
);