summaryrefslogtreecommitdiff
path: root/src/lib/libssl/ssl_versions.c
diff options
context:
space:
mode:
Diffstat (limited to 'src/lib/libssl/ssl_versions.c')
-rw-r--r--src/lib/libssl/ssl_versions.c10
1 files changed, 5 insertions, 5 deletions
diff --git a/src/lib/libssl/ssl_versions.c b/src/lib/libssl/ssl_versions.c
index 4a58f14ccd..3cd6db01ca 100644
--- a/src/lib/libssl/ssl_versions.c
+++ b/src/lib/libssl/ssl_versions.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: ssl_versions.c,v 1.24 2022/09/11 18:13:30 jsing Exp $ */ 1/* $OpenBSD: ssl_versions.c,v 1.25 2022/10/02 16:36:41 jsing Exp $ */
2/* 2/*
3 * Copyright (c) 2016, 2017 Joel Sing <jsing@openbsd.org> 3 * Copyright (c) 2016, 2017 Joel Sing <jsing@openbsd.org>
4 * 4 *
@@ -140,13 +140,13 @@ ssl_enabled_tls_version_range(SSL *s, uint16_t *min_ver, uint16_t *max_ver)
140 140
141 min_version = 0; 141 min_version = 0;
142 max_version = TLS1_3_VERSION; 142 max_version = TLS1_3_VERSION;
143 options = s->internal->options; 143 options = s->options;
144 144
145 if (SSL_is_dtls(s)) { 145 if (SSL_is_dtls(s)) {
146 options = 0; 146 options = 0;
147 if (s->internal->options & SSL_OP_NO_DTLSv1) 147 if (s->options & SSL_OP_NO_DTLSv1)
148 options |= SSL_OP_NO_TLSv1 | SSL_OP_NO_TLSv1_1; 148 options |= SSL_OP_NO_TLSv1 | SSL_OP_NO_TLSv1_1;
149 if (s->internal->options & SSL_OP_NO_DTLSv1_2) 149 if (s->options & SSL_OP_NO_DTLSv1_2)
150 options |= SSL_OP_NO_TLSv1 | SSL_OP_NO_TLSv1_2; 150 options |= SSL_OP_NO_TLSv1 | SSL_OP_NO_TLSv1_2;
151 } 151 }
152 152
@@ -174,7 +174,7 @@ ssl_enabled_tls_version_range(SSL *s, uint16_t *min_ver, uint16_t *max_ver)
174 174
175 /* Limit to configured version range. */ 175 /* Limit to configured version range. */
176 if (!ssl_clamp_tls_version_range(&min_version, &max_version, 176 if (!ssl_clamp_tls_version_range(&min_version, &max_version,
177 s->internal->min_tls_version, s->internal->max_tls_version)) 177 s->min_tls_version, s->max_tls_version))
178 return 0; 178 return 0;
179 179
180 /* QUIC requires a minimum of TLSv1.3. */ 180 /* QUIC requires a minimum of TLSv1.3. */