diff options
| author | jsing <> | 2026-04-03 12:58:19 +0000 |
|---|---|---|
| committer | jsing <> | 2026-04-03 12:58:19 +0000 |
| commit | 42d1ecbb4220b6260fa2da63402ec3f5cbad849a (patch) | |
| tree | 54561e6b94ac4ffe54812d2ae61334aacbe86c53 /src/lib/libssl/ssl_seclevel.c | |
| parent | d8c990b8ab23e4f390c5f883d8da8177ef804444 (diff) | |
| download | openbsd-42d1ecbb4220b6260fa2da63402ec3f5cbad849a.tar.gz openbsd-42d1ecbb4220b6260fa2da63402ec3f5cbad849a.tar.bz2 openbsd-42d1ecbb4220b6260fa2da63402ec3f5cbad849a.zip | |
Ensure that we cannot negotiate TLSv1.1 or lower.
TLS versions prior to TLSv1.2 were disabled a while ago, however this
was done in the version handling code. Remove TLSv1.1 and earlier from
ssl_get_method() and add an explicit min version check in the legacy
client and server, to provide a stronger guarantee.
ok kenjiro@ tb@
Diffstat (limited to 'src/lib/libssl/ssl_seclevel.c')
0 files changed, 0 insertions, 0 deletions