From c2e9985bc26df86c5ec859f59806bbcdce234828 Mon Sep 17 00:00:00 2001
From: Dmytro Bogovych <dmytro.bogovych@gmail.com>
Date: Thu, 15 Sep 2022 14:33:38 +0300
Subject: [PATCH] - enforce TLS 1.2 usage

---
 src/libs/resiprocate/resip/stack/ssl/Security.cxx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/libs/resiprocate/resip/stack/ssl/Security.cxx b/src/libs/resiprocate/resip/stack/ssl/Security.cxx
index ea96fff4..22a87c65 100644
--- a/src/libs/resiprocate/resip/stack/ssl/Security.cxx
+++ b/src/libs/resiprocate/resip/stack/ssl/Security.cxx
@@ -1040,7 +1040,7 @@ BaseSecurity::BaseSecurity (const CipherList& cipherSuite) :
    mRootSslCerts = X509_STORE_new();
    assert(mRootTlsCerts && mRootSslCerts);
 
-   mTlsCtx = SSL_CTX_new( TLSv1_method() );
+   mTlsCtx = SSL_CTX_new( TLSv1_2_method() );
    if (!mTlsCtx)
    {
       ErrLog(<< "SSL_CTX_new failed, dumping OpenSSL error stack:");