Use secure TLS/SSL versions:

TLS1.2 can be used instead, it is available in all currently
supported versions of OpenSSL.

Signed-off-by: Damian Jarek <damian.jarek93@gmail.com>

CHANGELOG.md

@@ -1,6 +1,7 @@
 Version 233:
 
 * Check __ANDROID__ instead
+* Use secure TLS/SSL versions
 
 --------------------------------------------------------------------------------
 

example/advanced/server-flex/advanced_server_flex.cpp

@@ -971,7 +971,7 @@ int main(int argc, char* argv[])
     net::io_context ioc{threads};
 
     // The SSL context is required, and holds certificates
-    ssl::context ctx{ssl::context::sslv23};
+    ssl::context ctx{ssl::context::tlsv12};
 
     // This holds the self-signed certificate used by the server
     load_server_certificate(ctx);

example/http/client/async-ssl/http_client_async_ssl.cpp

@@ -220,7 +220,7 @@ int main(int argc, char** argv)
     net::io_context ioc;
 
     // The SSL context is required, and holds certificates
-    ssl::context ctx{ssl::context::sslv23_client};
+    ssl::context ctx{ssl::context::tlsv12_client};
 
     // This holds the root certificate used for verification
     load_root_certificates(ctx);

example/http/client/coro-ssl/http_client_coro_ssl.cpp

@@ -153,7 +153,7 @@ int main(int argc, char** argv)
     net::io_context ioc;
 
     // The SSL context is required, and holds certificates
-    ssl::context ctx{ssl::context::sslv23_client};
+    ssl::context ctx{ssl::context::tlsv12_client};
 
     // This holds the root certificate used for verification
     load_root_certificates(ctx);

example/http/client/sync-ssl/http_client_sync_ssl.cpp

@@ -57,7 +57,7 @@ int main(int argc, char** argv)
         net::io_context ioc;
 
         // The SSL context is required, and holds certificates
-        ssl::context ctx(ssl::context::sslv23_client);
+        ssl::context ctx(ssl::context::tlsv12_client);
 
         // This holds the root certificate used for verification
         load_root_certificates(ctx);

example/http/server/async-ssl/http_server_async_ssl.cpp

@@ -521,7 +521,7 @@ int main(int argc, char* argv[])
     net::io_context ioc{threads};
 
     // The SSL context is required, and holds certificates
-    ssl::context ctx{ssl::context::sslv23};
+    ssl::context ctx{ssl::context::tlsv12};
 
     // This holds the self-signed certificate used by the server
     load_server_certificate(ctx);

example/http/server/coro-ssl/http_server_coro_ssl.cpp

@@ -402,7 +402,7 @@ int main(int argc, char* argv[])
     net::io_context ioc{threads};
 
     // The SSL context is required, and holds certificates
-    ssl::context ctx{ssl::context::sslv23};
+    ssl::context ctx{ssl::context::tlsv12};
 
     // This holds the self-signed certificate used by the server
     load_server_certificate(ctx);

example/http/server/flex/http_server_flex.cpp

@@ -671,7 +671,7 @@ int main(int argc, char* argv[])
     net::io_context ioc{threads};
 
     // The SSL context is required, and holds certificates
-    ssl::context ctx{ssl::context::sslv23};
+    ssl::context ctx{ssl::context::tlsv12};
 
     // This holds the self-signed certificate used by the server
     load_server_certificate(ctx);

example/http/server/stackless-ssl/http_server_stackless_ssl.cpp

@@ -523,7 +523,7 @@ int main(int argc, char* argv[])
     net::io_context ioc{threads};
 
     // The SSL context is required, and holds certificates
-    ssl::context ctx{ssl::context::sslv23};
+    ssl::context ctx{ssl::context::tlsv12};
 
     // This holds the self-signed certificate used by the server
     load_server_certificate(ctx);

example/http/server/sync-ssl/http_server_sync_ssl.cpp

@@ -325,7 +325,7 @@ int main(int argc, char* argv[])
         net::io_context ioc{1};
 
         // The SSL context is required, and holds certificates
-        ssl::context ctx{ssl::context::sslv23};
+        ssl::context ctx{ssl::context::tlsv12};
 
         // This holds the self-signed certificate used by the server
         load_server_certificate(ctx);

example/websocket/client/async-ssl/websocket_client_async_ssl.cpp

@@ -231,7 +231,7 @@ int main(int argc, char** argv)
     net::io_context ioc;
 
     // The SSL context is required, and holds certificates
-    ssl::context ctx{ssl::context::sslv23_client};
+    ssl::context ctx{ssl::context::tlsv12_client};
 
     // This holds the root certificate used for verification
     load_root_certificates(ctx);

example/websocket/client/coro-ssl/websocket_client_coro_ssl.cpp

@@ -147,7 +147,7 @@ int main(int argc, char** argv)
     net::io_context ioc;
 
     // The SSL context is required, and holds certificates
-    ssl::context ctx{ssl::context::sslv23_client};
+    ssl::context ctx{ssl::context::tlsv12_client};
 
     // This holds the root certificate used for verification
     load_root_certificates(ctx);

example/websocket/client/sync-ssl/websocket_client_sync_ssl.cpp

@@ -55,7 +55,7 @@ int main(int argc, char** argv)
         net::io_context ioc;
 
         // The SSL context is required, and holds certificates
-        ssl::context ctx{ssl::context::sslv23_client};
+        ssl::context ctx{ssl::context::tlsv12_client};
 
         // This holds the root certificate used for verification
         load_root_certificates(ctx);

example/websocket/server/async-ssl/websocket_server_async_ssl.cpp

@@ -279,7 +279,7 @@ int main(int argc, char* argv[])
     net::io_context ioc{threads};
 
     // The SSL context is required, and holds certificates
-    ssl::context ctx{ssl::context::sslv23};
+    ssl::context ctx{ssl::context::tlsv12};
 
     // This holds the self-signed certificate used by the server
     load_server_certificate(ctx);

example/websocket/server/coro-ssl/websocket_server_coro_ssl.cpp

@@ -177,7 +177,7 @@ int main(int argc, char* argv[])
     net::io_context ioc{threads};
 
     // The SSL context is required, and holds certificates
-    ssl::context ctx{ssl::context::sslv23};
+    ssl::context ctx{ssl::context::tlsv12};
 
     // This holds the self-signed certificate used by the server
     load_server_certificate(ctx);

example/websocket/server/stackless-ssl/websocket_server_stackless_ssl.cpp

@@ -282,7 +282,7 @@ int main(int argc, char* argv[])
     net::io_context ioc{threads};
 
     // The SSL context is required, and holds certificates
-    ssl::context ctx{ssl::context::sslv23};
+    ssl::context ctx{ssl::context::tlsv12};
 
     // This holds the self-signed certificate used by the server
     load_server_certificate(ctx);

example/websocket/server/sync-ssl/websocket_server_sync_ssl.cpp

@@ -107,7 +107,7 @@ int main(int argc, char* argv[])
         net::io_context ioc{1};
 
         // The SSL context is required, and holds certificates
-        ssl::context ctx{ssl::context::sslv23};
+        ssl::context ctx{ssl::context::tlsv12};
 
         // This holds the self-signed certificate used by the server
         load_server_certificate(ctx);

include/boost/beast/ssl/ssl_stream.hpp

@@ -45,7 +45,7 @@ namespace beast {
     To use this template with a @ref tcp_stream, you would write:
     @code
         net::io_context ioc;
-        net::ssl::context ctx{net::ssl::context::sslv23};
+        net::ssl::context ctx{net::ssl::context::tlsv12};
         beast::ssl_stream<beast::tcp_stream> sock{ioc, ctx};
     @endcode
 

test/beast/websocket/doc_snippets.cpp

@@ -255,7 +255,7 @@ net::ip::tcp::socket sock{ios};
 
 {
 //[wss_snippet_2
-    net::ssl::context ctx{net::ssl::context::sslv23};
+    net::ssl::context ctx{net::ssl::context::tlsv12};
     stream<net::ssl::stream<net::ip::tcp::socket>> wss{ios, ctx};
 //]
 }
@@ -263,7 +263,7 @@ net::ip::tcp::socket sock{ios};
 {
 //[wss_snippet_3
     net::ip::tcp::endpoint ep;
-    net::ssl::context ctx{net::ssl::context::sslv23};
+    net::ssl::context ctx{net::ssl::context::tlsv12};
     stream<net::ssl::stream<net::ip::tcp::socket>> ws{ios, ctx};
 
     // connect the underlying TCP/IP socket

test/beast/websocket/ssl.cpp

@@ -31,7 +31,7 @@ public:
     testTeardown()
     {
         net::io_context ioc;
-        net::ssl::context ctx(net::ssl::context::sslv23);
+        net::ssl::context ctx(net::ssl::context::tlsv12);
         Socket ss(ioc, ctx);
 
         struct handler

test/doc/core_3_timeouts.cpp

@@ -299,7 +299,7 @@ https_get (std::string const& host, std::string const& target, error_code& ec)
     // This context is used to hold client and server certificates.
     // We do not perform certificate verification in this example.
 
-    net::ssl::context ctx(net::ssl::context::sslv23);
+    net::ssl::context ctx(net::ssl::context::tlsv12);
 
     // This string will hold the body of the HTTP response, if any.
     std::string result;

test/doc/snippets.ipp

@@ -22,5 +22,5 @@ std::thread t{[&](){ ioc.run(); }};
 
 tcp::socket sock(ioc);
 
-ssl::context ctx(ssl::context::sslv23);
+ssl::context ctx(ssl::context::tlsv12);
 

test/doc/websocket_common.ipp

@@ -16,6 +16,6 @@ using namespace boost::beast::websocket;
 
 net::io_context ioc;
 tcp_stream sock(ioc);
-net::ssl::context ctx(net::ssl::context::sslv23);
+net::ssl::context ctx(net::ssl::context::tlsv12);
 
 //]