From e9fe0d205322c81714d976c7e2b0b98e131e9e4b Mon Sep 17 00:00:00 2001
From: beck <>
Date: Wed, 22 Jan 2020 06:44:02 +0000
Subject: Enable TLS version 1.3 in the default protocols for libtls.

This will as yet not do anything, until we turn it on in the
lower level libraries.

ok jsing@
---
 src/lib/libtls/tls.h | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'src/lib/libtls')

diff --git a/src/lib/libtls/tls.h b/src/lib/libtls/tls.h
index 59e1aac49b..20f55dcabd 100644
--- a/src/lib/libtls/tls.h
+++ b/src/lib/libtls/tls.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: tls.h,v 1.57 2020/01/20 08:39:21 jsing Exp $ */
+/* $OpenBSD: tls.h,v 1.58 2020/01/22 06:44:02 beck Exp $ */
 /*
  * Copyright (c) 2014 Joel Sing <jsing@openbsd.org>
  *
@@ -39,7 +39,7 @@ extern "C" {
 	 TLS_PROTOCOL_TLSv1_2|TLS_PROTOCOL_TLSv1_3)
 
 #define TLS_PROTOCOLS_ALL TLS_PROTOCOL_TLSv1
-#define TLS_PROTOCOLS_DEFAULT TLS_PROTOCOL_TLSv1_2
+#define TLS_PROTOCOLS_DEFAULT (TLS_PROTOCOL_TLSv1_2|TLS_PROTOCOL_TLSv1_3)
 
 #define TLS_WANT_POLLIN		-2
 #define TLS_WANT_POLLOUT	-3
-- 
cgit v1.2.3-55-g6feb