From 91953baf07be4516df7464e7e806c4e280f62d54 Mon Sep 17 00:00:00 2001 From: Tatsuya Kinoshita Date: Wed, 11 Mar 2020 19:33:34 +0900 Subject: Extend ssl_forbid_method for TLSv1.2 and TLSv1.3 --- url.c | 10 ++++++++++ 1 file changed, 10 insertions(+) (limited to 'url.c') diff --git a/url.c b/url.c index aab7b9d..a9e4108 100644 --- a/url.c +++ b/url.c @@ -344,8 +344,18 @@ openSSLHandle(int sock, char *hostname, char **p_cert) option |= SSL_OP_NO_TLSv1; if (strchr(ssl_forbid_method, '4')) option |= SSL_OP_NO_TLSv1; +#ifdef SSL_OP_NO_TLSv1_1 if (strchr(ssl_forbid_method, '5')) option |= SSL_OP_NO_TLSv1_1; +#endif +#ifdef SSL_OP_NO_TLSv1_2 + if (strchr(ssl_forbid_method, '6')) + option |= SSL_OP_NO_TLSv1_2; +#endif +#ifdef SSL_OP_NO_TLSv1_3 + if (strchr(ssl_forbid_method, '7')) + option |= SSL_OP_NO_TLSv1_3; +#endif } #ifdef SSL_OP_NO_COMPRESSION option |= SSL_OP_NO_COMPRESSION; -- cgit v1.2.3