]> git.ipfire.org Git - thirdparty/hostap.git/commit
OpenSSL: Allow TLS v1.1 and v1.2 to be negotiated by default
authorJouni Malinen <j@w1.fi>
Sat, 15 Nov 2014 10:35:10 +0000 (12:35 +0200)
committerJouni Malinen <j@w1.fi>
Sat, 15 Nov 2014 10:35:10 +0000 (12:35 +0200)
commit35efa2479ff19c3f13e69dc50d2708ce79a99beb
treee1100c8b1d54e4e46f35545690efc35c318bcc5d
parent281ff42a01b6648a56f70f3a805a3f0bd478d26f
OpenSSL: Allow TLS v1.1 and v1.2 to be negotiated by default

Use SSLv23_method() to enable TLS version negotiation for any version
equal to or newer than 1.0. If the old behavior is needed as a
workaround for some broken authentication servers, it can be configured
with phase1="tls_disable_tlsv1_1=1 tls_disable_tlsv1_2=1".

Signed-off-by: Jouni Malinen <j@w1.fi>
src/crypto/tls_openssl.c