Specify minimum and maximum protocol version for each method. This is

currently unused, but will be in the near future.

ok beck@

1 files changed, 9 insertions, 1 deletions

diff --git a/src/lib/libssl/t1_meth.c b/src/lib/libssl/t1_meth.c
index 261ab192be..5c37142ab3 100644
--- a/src/lib/libssl/t1_meth.c
+++ b/src/lib/libssl/t1_meth.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: t1_meth.c,v 1.18 2016/11/04 18:30:21 guenther Exp $ */
+/* $OpenBSD: t1_meth.c,v 1.19 2017/01/21 06:50:02 jsing Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -66,6 +66,8 @@ static const SSL_METHOD *tls1_get_method(int ver);
 
 static const SSL_METHOD TLS_method_data = {
         .version = TLS1_2_VERSION,
+        .min_version = TLS1_VERSION,
+        .max_version = TLS1_2_VERSION,
         .ssl_new = tls1_new,
         .ssl_clear = tls1_clear,
         .ssl_free = tls1_free,
@@ -98,6 +100,8 @@ static const SSL_METHOD TLS_method_data = {
 
 static const SSL_METHOD TLSv1_method_data = {
         .version = TLS1_VERSION,
+        .min_version = TLS1_VERSION,
+        .max_version = TLS1_VERSION,
         .ssl_new = tls1_new,
         .ssl_clear = tls1_clear,
         .ssl_free = tls1_free,
@@ -130,6 +134,8 @@ static const SSL_METHOD TLSv1_method_data = {
 
 static const SSL_METHOD TLSv1_1_method_data = {
         .version = TLS1_1_VERSION,
+        .min_version = TLS1_1_VERSION,
+        .max_version = TLS1_1_VERSION,
         .ssl_new = tls1_new,
         .ssl_clear = tls1_clear,
         .ssl_free = tls1_free,
@@ -162,6 +168,8 @@ static const SSL_METHOD TLSv1_1_method_data = {
 
 static const SSL_METHOD TLSv1_2_method_data = {
         .version = TLS1_2_VERSION,
+        .min_version = TLS1_2_VERSION,
+        .max_version = TLS1_2_VERSION,
         .ssl_new = tls1_new,
         .ssl_clear = tls1_clear,
         .ssl_free = tls1_free,