Skip to content

Commit

Permalink
Support OpenSSL with no TLSv1
Browse files Browse the repository at this point in the history
RFC 8996, Deprecating TLS 1.0 and TLS 1.1, states that TLS clients MUST NOT send a TLS 1.0 or TLS 1.1 ClientHello and MUST respond to a TLS 1.0 or TLS 1.1 ServerHello with a "protocol_version" alert.

At the moment, all versions of OpenSSL support TLS 1.0, TLS 1.1, and TLS 1.2. However, TLS 1.0 and TLS 1.1 are disabled in LibreSSL 3.8.1 and it is possible to compile OpenSSL without support for these protocols (using the configure options no-tls1, no-tls1_1, and no-tls1_2). This commit adds support for versions of $OPENSSL that do not support TLS 1.0 or TLS 1.1.
  • Loading branch information
dcooper16 committed Sep 7, 2023
1 parent eaf6e40 commit 06e7205
Showing 1 changed file with 176 additions and 109 deletions.
Loading

0 comments on commit 06e7205

Please sign in to comment.