[tls] Default to supporting only TLSv1.1 or above

Signed-off-by: Michael Brown <mcb30@ipxe.org>

diff --git a/src/config/crypto.h b/src/config/crypto.h
index d3c34a94d717bd776e7777db12b23744bc72f468..cc8657389ad8cd55b12e86017b5d742eb77eadad 100644 (file)
--- a/src/config/crypto.h
+++ b/src/config/crypto.h
@@ -10,7 +10,7 @@
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
 
 /** Minimum TLS version */
-#define TLS_VERSION_MIN TLS_VERSION_TLS_1_0
+#define TLS_VERSION_MIN TLS_VERSION_TLS_1_1
 
 /** RSA public-key algorithm */
 #define CRYPTO_PUBKEY_RSA