- enforce TLS 1.2 usage
This commit is contained in:
parent
d07eab796f
commit
c2e9985bc2
|
|
@ -1040,7 +1040,7 @@ BaseSecurity::BaseSecurity (const CipherList& cipherSuite) :
|
||||||
mRootSslCerts = X509_STORE_new();
|
mRootSslCerts = X509_STORE_new();
|
||||||
assert(mRootTlsCerts && mRootSslCerts);
|
assert(mRootTlsCerts && mRootSslCerts);
|
||||||
|
|
||||||
mTlsCtx = SSL_CTX_new( TLSv1_method() );
|
mTlsCtx = SSL_CTX_new( TLSv1_2_method() );
|
||||||
if (!mTlsCtx)
|
if (!mTlsCtx)
|
||||||
{
|
{
|
||||||
ErrLog(<< "SSL_CTX_new failed, dumping OpenSSL error stack:");
|
ErrLog(<< "SSL_CTX_new failed, dumping OpenSSL error stack:");
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue