Unverified Commit 613ccbf2 authored by sergii.kavunenko's avatar sergii.kavunenko Committed by Daniel Stenberg
Browse files

WolfSSL: adding TLSv1.3 

Closes #2349
parent cb281f9d

lib/vtls/cyassl.c

+11 −1
Original line number Diff line number Diff line
@@ -199,8 +199,14 @@ cyassl_connect_step1(struct connectdata *conn, 
    use_sni(TRUE);

    break;

  case CURL_SSLVERSION_TLSv1_3:

#ifdef WOLFSSL_TLS13

    req_method = wolfTLSv1_3_client_method();

    use_sni(TRUE);

    break;

#else

    failf(data, "CyaSSL: TLS 1.3 is not yet supported");

    return CURLE_SSL_CONNECT_ERROR;

#endif

  case CURL_SSLVERSION_SSLv3:

#ifdef WOLFSSL_ALLOW_SSLV3

    req_method = SSLv3_client_method();
@@ -245,7 +251,11 @@ cyassl_connect_step1(struct connectdata *conn, 
    */

    if((wolfSSL_CTX_SetMinVersion(BACKEND->ctx, WOLFSSL_TLSV1) != 1) &&

       (wolfSSL_CTX_SetMinVersion(BACKEND->ctx, WOLFSSL_TLSV1_1) != 1) &&

       (wolfSSL_CTX_SetMinVersion(BACKEND->ctx, WOLFSSL_TLSV1_2) != 1)) {

       (wolfSSL_CTX_SetMinVersion(BACKEND->ctx, WOLFSSL_TLSV1_2) != 1)

#ifdef WOLFSSL_TLS13

       && (wolfSSL_CTX_SetMinVersion(BACKEND->ctx, WOLFSSL_TLSV1_3) != 1)

#endif

      ) {

      failf(data, "SSL: couldn't set the minimum protocol version");

      return CURLE_SSL_CONNECT_ERROR;

    }