forked from wolfSSL/wolfssl
openssl_compatible_default: use DTLSv1.0 as minDowngrade in DTLS
This commit is contained in:
@@ -522,7 +522,8 @@ WOLFSSL_CTX* wolfSSL_CTX_new_ex(WOLFSSL_METHOD* method, void* heap)
|
|||||||
wolfSSL_CTX_set_verify(ctx, SSL_VERIFY_NONE, NULL);
|
wolfSSL_CTX_set_verify(ctx, SSL_VERIFY_NONE, NULL);
|
||||||
wolfSSL_CTX_set_mode(ctx, SSL_MODE_AUTO_RETRY);
|
wolfSSL_CTX_set_mode(ctx, SSL_MODE_AUTO_RETRY);
|
||||||
if (wolfSSL_CTX_set_min_proto_version(ctx,
|
if (wolfSSL_CTX_set_min_proto_version(ctx,
|
||||||
SSL3_VERSION) != WOLFSSL_SUCCESS ||
|
(method->version.major == DTLS_MAJOR) ?
|
||||||
|
DTLS1_VERSION : SSL3_VERSION) != WOLFSSL_SUCCESS ||
|
||||||
#ifdef HAVE_ANON
|
#ifdef HAVE_ANON
|
||||||
wolfSSL_CTX_allow_anon_cipher(ctx) != WOLFSSL_SUCCESS ||
|
wolfSSL_CTX_allow_anon_cipher(ctx) != WOLFSSL_SUCCESS ||
|
||||||
#endif
|
#endif
|
||||||
|
Reference in New Issue
Block a user