diff --git a/examples/protocols/openssl_server/main/openssl_server.c b/examples/protocols/openssl_server/main/openssl_server.c index 1eea2110ce..c74bb0e41f 100755 --- a/examples/protocols/openssl_server/main/openssl_server.c +++ b/examples/protocols/openssl_server/main/openssl_server.c @@ -37,7 +37,7 @@ const static char *TAG = "Openssl_demo"; #define OPENSSL_DEMO_SERVER_ACK "HTTP/1.1 200 OK\r\n" \ "Content-Type: text/html\r\n" \ - "Content-Length: 98\r\n" \ + "Content-Length: 98\r\n\r\n" \ "\r\n" \ "\r\n" \ "OpenSSL demo\r\n" \ @@ -71,6 +71,10 @@ static void openssl_demo_thread(void *p) const unsigned int prvtkey_pem_bytes = prvtkey_pem_end - prvtkey_pem_start; ESP_LOGI(TAG, "SSL server context create ......"); + /* For security reasons, it is best if you can use + TLSv1_2_server_method() here instead of TLS_server_method(). + However some old browsers may not support TLS v1.2. + */ ctx = SSL_CTX_new(TLS_server_method()); if (!ctx) { ESP_LOGI(TAG, "failed");