use TLS_method()

as per https://www.openssl.org/docs/man3.1/man3/TLS_method.html

diff --git a/src/lib/tls/base-h b/src/lib/tls/base-h
index c518e95df63c40ec27c4ac393a9803ef572f2064..13326d50129c8351557bff69377c2e1530cc5083 100644 (file)
--- a/src/lib/tls/base-h
+++ b/src/lib/tls/base-h
@@ -104,7 +104,7 @@ extern _Thread_local TALLOC_CTX *ssl_talloc_ctx;
  * so will free the allocated object last, after doing manual cleanups.
  *
  @code{.c}
-   FR_OPENSSL_BIND_MEMORY(ctx = SSL_CTX_new(SSLv23_method()));
+   FR_OPENSSL_BIND_MEMORY(ctx = SSL_CTX_new(TLS_method()));
    if (!ctx) ..error
  @endcode
  * @param _expr                The call to the OpenSSL function and storage of the

diff --git a/src/lib/tls/ctx.c b/src/lib/tls/ctx.c
index afb44a27418047d0878c002141c25480f022395e..0da2685cbe532c11dedc36c829eb15b75e98273b 100644 (file)
--- a/src/lib/tls/ctx.c
+++ b/src/lib/tls/ctx.c
@@ -615,7 +615,7 @@ SSL_CTX *fr_tls_ctx_alloc(fr_tls_conf_t const *conf, bool client)
        int             verify_mode = SSL_VERIFY_NONE;
        int             ctx_options = 0;
 
-       ctx = SSL_CTX_new(SSLv23_method());
+       ctx = SSL_CTX_new(TLS_method());
        if (!ctx) {
                fr_tls_log(NULL, "Failed creating TLS context");
                return NULL;