summaryrefslogtreecommitdiff
path: root/src/lib/libssl/test
diff options
context:
space:
mode:
authorjsing <>2026-04-03 12:58:19 +0000
committerjsing <>2026-04-03 12:58:19 +0000
commit42d1ecbb4220b6260fa2da63402ec3f5cbad849a (patch)
tree54561e6b94ac4ffe54812d2ae61334aacbe86c53 /src/lib/libssl/test
parentd8c990b8ab23e4f390c5f883d8da8177ef804444 (diff)
downloadopenbsd-42d1ecbb4220b6260fa2da63402ec3f5cbad849a.tar.gz
openbsd-42d1ecbb4220b6260fa2da63402ec3f5cbad849a.tar.bz2
openbsd-42d1ecbb4220b6260fa2da63402ec3f5cbad849a.zip
Ensure that we cannot negotiate TLSv1.1 or lower.
TLS versions prior to TLSv1.2 were disabled a while ago, however this was done in the version handling code. Remove TLSv1.1 and earlier from ssl_get_method() and add an explicit min version check in the legacy client and server, to provide a stronger guarantee. ok kenjiro@ tb@
Diffstat (limited to 'src/lib/libssl/test')
0 files changed, 0 insertions, 0 deletions