Browse Source

tls: set default tls method (version) to 1+

- it was 1, but newer libssl doesn't have it anymore
- while older systems don't have newer version support

(cherry picked from commit 1da196174d8cd7e82ce57d4de60197fc063e6b50)
Daniel-Constantin Mierla 5 years ago
parent
commit
bd9fcd3442
1 changed files with 3 additions and 3 deletions
  1. 3 3
      src/modules/tls/tls_mod.c

+ 3 - 3
src/modules/tls/tls_mod.c

@@ -103,7 +103,7 @@ static tls_domain_t mod_params = {
 	STR_STATIC_INIT(TLS_CA_FILE),      /* CA file */
 	0,                /* Require certificate */
 	{0, },                /* Cipher list */
-	TLS_USE_TLSv1,    /* TLS method */
+	TLS_USE_TLSv1_PLUS,   /* TLS method */
 	STR_STATIC_INIT(TLS_CRL_FILE), /* Certificate revocation list */
 	{0, 0},           /* Server name (SNI) */
 	0,                /* Server name (SNI) mode */
@@ -127,7 +127,7 @@ tls_domain_t srv_defaults = {
 	STR_STATIC_INIT(TLS_CA_FILE),      /* CA file */
 	0,                /* Require certificate */
 	{0, 0},                /* Cipher list */
-	TLS_USE_TLSv1,    /* TLS method */
+	TLS_USE_TLSv1_PLUS,    /* TLS method */
 	STR_STATIC_INIT(TLS_CRL_FILE), /* Certificate revocation list */
 	{0, 0},           /* Server name (SNI) */
 	0,                /* Server name (SNI) mode */
@@ -168,7 +168,7 @@ tls_domain_t cli_defaults = {
 	STR_STATIC_INIT(TLS_CA_FILE),      /* CA file */
 	0,                /* Require certificate */
 	{0, 0},                /* Cipher list */
-	TLS_USE_TLSv1,    /* TLS method */
+	TLS_USE_TLSv1_PLUS,    /* TLS method */
 	{0, 0}, /* Certificate revocation list */
 	{0, 0},           /* Server name (SNI) */
 	0,                /* Server name (SNI) mode */