Allow TLS 1.1 and 1.2

diff --git a/src/main/tls.c b/src/main/tls.c
index 373e24cc9cf49f4ff0717e09fc074fbaa9b56ba3..2aef71fb808c1d2e7777dcda74906107a3053f82 100644 (file)
--- a/src/main/tls.c
+++ b/src/main/tls.c
@@ -2171,7 +2171,7 @@ SSL_CTX *tls_init_ctx(fr_tls_server_conf_t *conf, int client)
        EVP_add_digest(EVP_sha256());
 #endif
 
-       ctx = SSL_CTX_new(TLSv1_method());
+       ctx = SSL_CTX_new(SSLv23_method()); /* which is really "all known SSL / TLS methods".  Idiots. */
        if (!ctx) {
                int err;
                while ((err = ERR_get_error())) {