Commit ea80a2dc authored by Daniel Stenberg's avatar Daniel Stenberg
Browse files

openssl: raise the max_version to 1.3 if asked for

Now I've managed to negotiate TLS 1.3 with https://enabled.tls13.com/ when
using boringssl.
parent f43b7b6c
Loading
Loading
Loading
Loading
+1 −0
Original line number Diff line number Diff line
@@ -1925,6 +1925,7 @@ static CURLcode ossl_connect_step1(struct connectdata *conn, int sockindex)

  case CURL_SSLVERSION_TLSv1_3:
#ifdef TLS1_3_VERSION
    SSL_CTX_set_max_proto_version(connssl->ctx, TLS1_3_VERSION);
    ctx_options |= SSL_OP_NO_SSLv2;
    ctx_options |= SSL_OP_NO_SSLv3;
    ctx_options |= SSL_OP_NO_TLSv1;