]> git.ipfire.org Git - thirdparty/freeradius-server.git/commitdiff
tls_max_version cannot be less than 1.0
authorAlan T. DeKok <aland@freeradius.org>
Sat, 23 Sep 2017 12:25:38 +0000 (08:25 -0400)
committerAlan T. DeKok <aland@freeradius.org>
Sat, 23 Sep 2017 12:25:38 +0000 (08:25 -0400)
src/main/tls/ctx.c

index 18b9c4a2094ed01899b3e83e9c20e8894bed84e3..b89f5d31dc7b91554f427461eef0fdbfd1ad36a5 100644 (file)
@@ -370,9 +370,6 @@ post_ca:
                 */
 #  ifdef SSL_OP_NO_TLSv1
                if (conf->tls_min_version > (float) 1.0) ctx_options |= SSL_OP_NO_TLSv1;
-               if ((conf->tls_max_version != (float) 0.0) && (conf->tls_max_version < (float) 1.0)) {
-                       ctx_options |= SSL_OP_NO_TLSv1;
-               }
                ctx_tls_versions |= SSL_OP_NO_TLSv1;
 #  endif
 #  ifdef SSL_OP_NO_TLSv1_1