FS-6727 allow 1.1 and 1.2, They should probably fix that soon

diff --git a/src/mod/endpoints/mod_verto/mod_verto.c b/src/mod/endpoints/mod_verto/mod_verto.c
index 28b3da528bcf0db8b92f3b795a87f0da890cdff3..ef167b6ba3d07126662866052400818c33e1801c 100644 (file)
--- a/src/mod/endpoints/mod_verto/mod_verto.c
+++ b/src/mod/endpoints/mod_verto/mod_verto.c
@@ -156,8 +156,6 @@ static void verto_init_ssl(verto_profile_t *profile)
        SSL_CTX_set_options(profile->ssl_ctx, SSL_OP_NO_SSLv3);
        /* Disable TLSv1 */
        SSL_CTX_set_options(profile->ssl_ctx, SSL_OP_NO_TLSv1);
-       /* Disable TLSv1_1 */
-       SSL_CTX_set_options(profile->ssl_ctx, SSL_OP_NO_TLSv1_1);
        /* Disable Compression CRIME (Compression Ratio Info-leak Made Easy) */
        SSL_CTX_set_options(profile->ssl_ctx, SSL_OP_NO_COMPRESSION);
 

diff --git a/src/mod/endpoints/mod_verto/ws.c b/src/mod/endpoints/mod_verto/ws.c
index e9100e297703aaf04981e78a8f0b76c5026d5ffd..2153855b089d5b6be2b9645321c29a3976a08f4d 100644 (file)
--- a/src/mod/endpoints/mod_verto/ws.c
+++ b/src/mod/endpoints/mod_verto/ws.c
@@ -102,8 +102,6 @@ void init_ssl(void) {
        SSL_CTX_set_options(globals.ssl_ctx, SSL_OP_NO_SSLv3);
        /* Disable TLSv1 */
        SSL_CTX_set_options(globals.ssl_ctx, SSL_OP_NO_TLSv1);
-       /* Disable TLSv1_1 */
-       SSL_CTX_set_options(globals.ssl_ctx, SSL_OP_NO_TLSv1_1);
        /* Disable Compression CRIME (Compression Ratio Info-leak Made Easy) */
        SSL_CTX_set_options(globals.ssl_ctx, SSL_OP_NO_COMPRESSION);
        /* set the local certificate from CertFile */