feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

WOLFSSL_MIN_DOWNGRADE, default: TLSv1_MINOR

Browse Source
This commit is contained in:
Takashi Kojo
2017-07-30 07:45:22 +09:00
committed by Jacob Barthelmeh
parent 5a40d8b3c2
commit 401db67bcd
2 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/internal.c
View File

@ -1345,7 +1345,7 @@ int InitSSL_Ctx(WOLFSSL_CTX* ctx, WOLFSSL_METHOD* method, void* heap)
ctx->refCount = 1; /* so either CTX_free or SSL_free can release */
ctx->heap = ctx; /* defaults to self */
ctx->timeout = WOLFSSL_SESSION_TIMEOUT;
ctx->minDowngrade = TLSv1_MINOR; /* current default */
ctx->minDowngrade = WOLFSSL_MIN_DOWNGRADE; /* current default: TLSv1_MINOR */
if (wc_InitMutex(&ctx->countMutex) < 0) {
WOLFSSL_MSG("Mutex error on CTX init");

4
wolfssl/internal.h
View File

@ -1185,6 +1185,10 @@ enum Misc {
READ_PROTO = 0 /* reading a protocol message */
};
/* minimum Downgrade Minor version */
#ifndef WOLFSSL_MIN_DOWNGRADE
#define WOLFSSL_MIN_DOWNGRADE TLSv1_MINOR
#endif
/* Set max implicit IV size for AEAD cipher suites */
#define AEAD_MAX_IMP_SZ 12