]> git.ipfire.org Git - thirdparty/openvpn.git/commitdiff
Fix --tls-version-max in mbed TLS builds
authorSteffan Karger <steffan@karger.me>
Fri, 4 Nov 2016 20:03:44 +0000 (21:03 +0100)
committerDavid Sommerseth <davids@openvpn.net>
Fri, 4 Nov 2016 21:16:31 +0000 (22:16 +0100)
These define renames were missed in the migration to 2.x, causing the
maximum TLS version to be detected incorrectly.

[DS: mbedTLS mapps supported SSL/TLS protocol version in the library
     through these macros.  TLSv1.1 = 3.2, TLSv1.2 = 3.3, etc ]

Signed-off-by: Steffan Karger <steffan@karger.me>
Acked-by: David Sommerseth <davids@openvpn.net>
Message-Id: <1478289824-9244-1-git-send-email-steffan@karger.me>
URL: http://www.mail-archive.com/search?l=mid&q=1478289824-9244-1-git-send-email-steffan@karger.me
Signed-off-by: David Sommerseth <davids@openvpn.net>
src/openvpn/ssl_mbedtls.c

index 8a761a45a45f0f0cdf468126dad649969fa3438d..a6c90b1f1cc50d4f1cd5f8dfbcfbd2a8477c58c5 100644 (file)
@@ -723,9 +723,9 @@ void tls_ctx_personalise_random(struct tls_root_ctx *ctx)
 int
 tls_version_max(void)
 {
-#if defined(SSL_MAJOR_VERSION_3) && defined(SSL_MINOR_VERSION_3)
+#if defined(MBEDTLS_SSL_MAJOR_VERSION_3) && defined(MBEDTLS_SSL_MINOR_VERSION_3)
   return TLS_VER_1_2;
-#elif defined(SSL_MAJOR_VERSION_3) && defined(SSL_MINOR_VERSION_2)
+#elif defined(MBEDTLS_SSL_MAJOR_VERSION_3) && defined(MBEDTLS_SSL_MINOR_VERSION_2)
   return TLS_VER_1_1;
 #else
   return TLS_VER_1_0;