From: Matt Caswell <matt@openssl.org>
Date: Tue, 5 Oct 2021 16:29:35 +0000 (+0100)
Subject: Increase the default security level to 2
X-Git-Tag: openssl-3.2.0-alpha1~3483
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b3a33dac8880b88038083b64d234506659921436;p=thirdparty%2Fopenssl.git

Increase the default security level to 2

OTC voted to increase the security level from 1 to 2

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/16760)
---

diff --git a/include/openssl/tls1.h b/include/openssl/tls1.h
index d6e9331fa1e..7be6d473f88 100644
--- a/include/openssl/tls1.h
+++ b/include/openssl/tls1.h
@@ -28,7 +28,7 @@ extern "C" {
 
 /* Default security level if not overridden at config time */
 # ifndef OPENSSL_TLS_SECURITY_LEVEL
-#  define OPENSSL_TLS_SECURITY_LEVEL 1
+#  define OPENSSL_TLS_SECURITY_LEVEL 2
 # endif
 
 /* TLS*_VERSION constants are defined in prov_ssl.h */