From: Alan T. DeKok <aland@freeradius.org>
Date: Mon, 3 Nov 2014 19:37:59 +0000 (-0500)
Subject: Allow TLS 1.1 and 1.2
X-Git-Tag: branch_3_1_x~4785
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d9a285ca285148a2fb122b18f73ab0cbffbc12f0;p=thirdparty%2Ffreeradius-server.git

Allow TLS 1.1 and 1.2
---

diff --git a/src/main/tls.c b/src/main/tls.c
index 373e24cc9cf..2aef71fb808 100644
--- a/src/main/tls.c
+++ b/src/main/tls.c
@@ -2171,7 +2171,7 @@ SSL_CTX *tls_init_ctx(fr_tls_server_conf_t *conf, int client)
 	EVP_add_digest(EVP_sha256());
 #endif
 
-	ctx = SSL_CTX_new(TLSv1_method());
+	ctx = SSL_CTX_new(SSLv23_method()); /* which is really "all known SSL / TLS methods".  Idiots. */
 	if (!ctx) {
 		int err;
 		while ((err = ERR_get_error())) {