← Commit list

cccc65f051

Stefan Eissing
Stefan Eissing
2025-11-03
SUCCESS Duration: 164s

Subject

openssl: check CURL_SSLVERSION_MAX_DEFAULT properly

Binary

No binary (build failed)

Architecture & Compiler Flags

Architecture: x86_64-linux-gnu Compiler: gcc (Ubuntu 11.4.0-1ubuntu1~22.04.3) 11.4.0

—

Build Log

(log yok)

Commit Diff GitHub →

lib/vtls/openssl.c +2 -0
lib/vtls/openssl.c+2 -0
@@ -4050,6 +4050,7 @@ static CURLcode ossl_init_method(struct Curl_cfilter *cf,
case TRNSPRT_QUIC:
*pssl_version_min = CURL_SSLVERSION_TLSv1_3;
if(conn_config->version_max &&
+ (conn_config->version_max != CURL_SSLVERSION_MAX_DEFAULT) &&
(conn_config->version_max != CURL_SSLVERSION_MAX_TLSv1_3)) {
failf(data, "QUIC needs at least TLS version 1.3");
return CURLE_SSL_CONNECT_ERROR;
@@ -4245,6 +4246,7 @@ CURLcode Curl_ossl_ctx_init(struct ossl_ctx *octx,
const char *ciphers13 = conn_config->cipher_list13;
if(ciphers13 &&
(!conn_config->version_max ||
+ (conn_config->version_max == CURL_SSLVERSION_MAX_DEFAULT) ||
(conn_config->version_max >= CURL_SSLVERSION_MAX_TLSv1_3))) {
if(!SSL_CTX_set_ciphersuites(octx->ssl_ctx, ciphers13)) {
failf(data, "failed setting TLS 1.3 cipher suite: %s", ciphers13);