Skip to content

Commit 8570eb2

Browse files
nielsbbvanassche
authored andcommitted
Allow TLS protocols higher than TLS10.
Modern TLS versions will not connect using these old versions.
1 parent 694b386 commit 8570eb2

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

snmplib/transports/snmpTLSTCPDomain.c

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -719,7 +719,7 @@ netsnmp_tlstcp_open_client(netsnmp_transport *t)
719719
}
720720

721721
#ifdef SSL_CTX_set_max_proto_version
722-
SSL_CTX_set_max_proto_version(tlsdata->ssl_context, TLS1_VERSION);
722+
SSL_CTX_set_max_proto_version(tlsdata->ssl_context, 0);
723723
#endif
724724

725725
/* RFC5953 Section 5.3.1: Establishing a Session as a Client
@@ -919,7 +919,7 @@ netsnmp_tlstcp_open_server(netsnmp_transport *t)
919919
tlsdata->ssl_context = sslctx_server_setup(TLS_method());
920920
#ifdef SSL_CTX_set_max_proto_version
921921
if (tlsdata->ssl_context)
922-
SSL_CTX_set_max_proto_version(tlsdata->ssl_context, TLS1_VERSION);
922+
SSL_CTX_set_max_proto_version(tlsdata->ssl_context, 0);
923923
#endif
924924

925925
t->sock = BIO_get_fd(tlsdata->accept_bio, NULL);

0 commit comments

Comments
 (0)