TLS: Allow TLS v1.2 to be negotiated

Signed-hostap: Jouni Malinen <j@w1.fi>

diff --git a/src/tls/tlsv1_server_read.c b/src/tls/tlsv1_server_read.c
index 11116f10c5687f1ac25c565382a3abadf25ea3b2..443c028fb47b94f72f392b6374512ec69d8528fd 100644 (file)
--- a/src/tls/tlsv1_server_read.c
+++ b/src/tls/tlsv1_server_read.c
@@ -99,6 +99,10 @@ static int tls_process_client_hello(struct tlsv1_server *conn, u8 ct,
 
        if (TLS_VERSION == TLS_VERSION_1)
                conn->rl.tls_version = TLS_VERSION_1;
+#ifdef CONFIG_TLSV12
+       else if (conn->client_version >= TLS_VERSION_1_2)
+               conn->rl.tls_version = TLS_VERSION_1_2;
+#endif /* CONFIG_TLSV12 */
        else if (conn->client_version > TLS_VERSION_1_1)
                conn->rl.tls_version = TLS_VERSION_1_1;
        else