Unverified Commit c5fe8680 authored by Daniel Stenberg's avatar Daniel Stenberg
Browse files

openssl: acknowledge --tls-max for default version too 

... previously it only used the max setting if a TLS version was also
explicitly asked for.

Reported-by: byte_bucket
Fixes #2571
Closes #2572
parent 3b6802cb

lib/vtls/openssl.c

+1 −2
Original line number Diff line number Diff line
@@ -2325,8 +2325,7 @@ static CURLcode ossl_connect_step1(struct connectdata *conn, int sockindex) 
  case CURL_SSLVERSION_TLSv1:

    ctx_options |= SSL_OP_NO_SSLv2;

    ctx_options |= SSL_OP_NO_SSLv3;

    break;



    /* FALLTHROUGH */

  case CURL_SSLVERSION_TLSv1_0:

  case CURL_SSLVERSION_TLSv1_1:

  case CURL_SSLVERSION_TLSv1_2: