Browse Source

Disable DTLS 1.3 with Mbed TLS for consistency

Paul-Louis Ageneau 1 year ago
parent
commit
f68ca99c88
1 changed files with 1 additions and 1 deletions
  1. 1 1
      src/impl/dtlstransport.cpp

+ 1 - 1
src/impl/dtlstransport.cpp

@@ -402,9 +402,9 @@ DtlsTransport::DtlsTransport(shared_ptr<IceTransport> lower, certificate_ptr cer
 		                   MBEDTLS_SSL_TRANSPORT_DATAGRAM, MBEDTLS_SSL_PRESET_DEFAULT),
 		               "Failed creating Mbed TLS Context");
 
+		mbedtls_ssl_conf_max_version(&mConf, MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3); // TLS 1.2
 		mbedtls_ssl_conf_authmode(&mConf, MBEDTLS_SSL_VERIFY_OPTIONAL);
 		mbedtls_ssl_conf_verify(&mConf, DtlsTransport::CertificateCallback, this);
-
 		mbedtls_ssl_conf_rng(&mConf, mbedtls_ctr_drbg_random, &mDrbg);
 
 		auto [crt, pk] = mCertificate->credentials();