b178d58266
Stefan Eissing
2025-09-11
Subject
quic: fix min TLS version handling
Binary
No binary (build failed)
Architecture & Compiler Flags
—
Build Log
(log yok)
Commit Diff GitHub →
lib/vtls/openssl.c+4 -3
| @@ -2865,11 +2865,12 @@ static void ossl_trace(int direction, int ssl_ver, int content_type, | |
| #if OPENSSL_VERSION_NUMBER >= 0x10100000L /* 1.1.0 */ | |
| static CURLcode | |
| - | ossl_set_ssl_version_min_max(struct Curl_cfilter *cf, SSL_CTX *ctx) |
| + | ossl_set_ssl_version_min_max(struct Curl_cfilter *cf, SSL_CTX *ctx, |
| + | unsigned int ssl_version_min) |
| { | |
| struct ssl_primary_config *conn_config = Curl_ssl_cf_get_primary_config(cf); | |
| /* first, TLS min version... */ | |
| - | long curl_ssl_version_min = conn_config->version; |
| + | long curl_ssl_version_min = (long)ssl_version_min; |
| long curl_ssl_version_max; | |
| /* convert curl min SSL version option to OpenSSL constant */ | |
| @@ -4110,7 +4111,7 @@ CURLcode Curl_ossl_ctx_init(struct ossl_ctx *octx, | |
| ctx_options |= SSL_OP_NO_SSLv3; | |
| #if OPENSSL_VERSION_NUMBER >= 0x10100000L /* 1.1.0 */ | |
| - | result = ossl_set_ssl_version_min_max(cf, octx->ssl_ctx); |
| + | result = ossl_set_ssl_version_min_max(cf, octx->ssl_ctx, ssl_version_min); |
| #else | |
| result = ossl_set_ssl_version_min_max_legacy(&ctx_options, cf, data); | |
| #endif | |