From: Daniel Stenberg <daniel@haxx.se>
Date: Tue, 15 May 2018 08:41:25 +0000 (+0200)
Subject: openssl: acknowledge --tls-max for default version too
X-Git-Tag: curl-7_61_0~151
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=c5fe86804cce21db3b9902a44ea8903b3b211db0;p=thirdparty%2Fcurl.git

openssl: acknowledge --tls-max for default version too

... previously it only used the max setting if a TLS version was also
explicitly asked for.

Reported-by: byte_bucket
Fixes #2571
Closes #2572
---

diff --git a/lib/vtls/openssl.c b/lib/vtls/openssl.c
index f6a4bd3fbf..a7bbdb2fd8 100644
--- a/lib/vtls/openssl.c
+++ b/lib/vtls/openssl.c
@@ -2325,8 +2325,7 @@ static CURLcode ossl_connect_step1(struct connectdata *conn, int sockindex)
   case CURL_SSLVERSION_TLSv1:
     ctx_options |= SSL_OP_NO_SSLv2;
     ctx_options |= SSL_OP_NO_SSLv3;
-    break;
-
+    /* FALLTHROUGH */
   case CURL_SSLVERSION_TLSv1_0:
   case CURL_SSLVERSION_TLSv1_1:
   case CURL_SSLVERSION_TLSv1_2: