From: Alan T. DeKok <aland@freeradius.org>
Date: Sat, 23 Sep 2017 12:25:38 +0000 (-0400)
Subject: tls_max_version cannot be less than 1.0
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=394c407bf088cae0562ec15e57cc7a14f73b8ac6;p=thirdparty%2Ffreeradius-server.git

tls_max_version cannot be less than 1.0
---

diff --git a/src/main/tls/ctx.c b/src/main/tls/ctx.c
index 18b9c4a2094..b89f5d31dc7 100644
--- a/src/main/tls/ctx.c
+++ b/src/main/tls/ctx.c
@@ -370,9 +370,6 @@ post_ca:
 		 */
 #  ifdef SSL_OP_NO_TLSv1
 		if (conf->tls_min_version > (float) 1.0) ctx_options |= SSL_OP_NO_TLSv1;
-		if ((conf->tls_max_version != (float) 0.0) && (conf->tls_max_version < (float) 1.0)) {
-			ctx_options |= SSL_OP_NO_TLSv1;
-		}
 		ctx_tls_versions |= SSL_OP_NO_TLSv1;
 #  endif
 #  ifdef SSL_OP_NO_TLSv1_1