CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/04/03 06:58:19
Modified files:
lib/libssl : ssl_clnt.c ssl_methods.c ssl_srvr.c
Log message:
Ensure that we cannot negotiate TLSv1.1 or lower.
TLS versions prior to TLSv1.2 were disabled a while ago, however this
was done in the version handling code. Remove TLSv1.1 and earlier from
ssl_get_method() and add an explicit min version check in the legacy
client and server, to provide a stronger guarantee.
ok kenjiro@ tb@
