Skip to content

Commit dfc6362

Browse files
security: bump minimum tls version for openssl to TLS 1.3 (#1405)
1 parent 5977b2c commit dfc6362

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

src/dpp/ssl_context.cpp

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -73,10 +73,10 @@ wrapped_ssl_ctx* generate_ssl_context(uint16_t port, const std::string &private_
7373
}
7474

7575
/* This sets the allowed SSL/TLS versions for the connection.
76-
* Do not allow SSL 3.0, TLS 1.0 or 1.1
76+
* Do not allow SSL 3.0, TLS < 1.3
7777
* https://www.packetlabs.net/posts/tls-1-1-no-longer-secure/
7878
*/
79-
if (!SSL_CTX_set_min_proto_version(context->context, TLS1_2_VERSION)) {
79+
if (!SSL_CTX_set_min_proto_version(context->context, TLS1_3_VERSION)) {
8080
throw dpp::connection_exception(err_ssl_version, "Failed to set minimum SSL version!");
8181
}
8282

0 commit comments

Comments
 (0)