Commit ea80a2dc authored by Daniel Stenberg's avatar Daniel Stenberg
Browse files

openssl: raise the max_version to 1.3 if asked for 

Now I've managed to negotiate TLS 1.3 with https://enabled.tls13.com/ when
using boringssl.
parent f43b7b6c

lib/vtls/openssl.c

+1 −0
Original line number Original line Diff line number Diff line
@@ -1925,6 +1925,7 @@ static CURLcode ossl_connect_step1(struct connectdata *conn, int sockindex) 




  case CURL_SSLVERSION_TLSv1_3:

  case CURL_SSLVERSION_TLSv1_3:

#ifdef TLS1_3_VERSION

#ifdef TLS1_3_VERSION

    SSL_CTX_set_max_proto_version(connssl->ctx, TLS1_3_VERSION);

    ctx_options |= SSL_OP_NO_SSLv2;

    ctx_options |= SSL_OP_NO_SSLv2;

    ctx_options |= SSL_OP_NO_SSLv3;

    ctx_options |= SSL_OP_NO_SSLv3;

    ctx_options |= SSL_OP_NO_TLSv1;

    ctx_options |= SSL_OP_NO_TLSv1;