Disable TLS v1.0 by default. Added new --enable-tlsv10 option to force enable (only works if --enable-oldtls is set, which is on by default).
This commit is contained in:
@@ -170,12 +170,19 @@ static void ShowCiphers(void)
|
||||
static void ShowVersions(void)
|
||||
{
|
||||
#ifndef NO_OLD_TLS
|
||||
#ifdef WOLFSSL_ALLOW_SSLV3
|
||||
printf("0:");
|
||||
#endif /* WOLFSSL_ALLOW_SSLV3 */
|
||||
printf("1:2:");
|
||||
#ifdef WOLFSSL_ALLOW_SSLV3
|
||||
printf("0:");
|
||||
#endif
|
||||
#ifdef WOLFSSL_ALLOW_TLSV10
|
||||
printf("1:");
|
||||
#endif
|
||||
printf("2:");
|
||||
#endif /* NO_OLD_TLS */
|
||||
printf("3\n");
|
||||
printf("3:");
|
||||
#ifdef WOLFSSL_TLS13
|
||||
printf("4:");
|
||||
#endif
|
||||
printf("\n");
|
||||
}
|
||||
|
||||
/* Measures average time to create, connect and disconnect a connection (TPS).
|
||||
@@ -1394,27 +1401,29 @@ THREAD_RETURN WOLFSSL_THREAD client_test(void* args)
|
||||
#endif
|
||||
|
||||
#ifndef NO_TLS
|
||||
#ifdef WOLFSSL_ALLOW_TLSV10
|
||||
case 1:
|
||||
method = wolfTLSv1_client_method_ex;
|
||||
break;
|
||||
#endif
|
||||
|
||||
case 2:
|
||||
method = wolfTLSv1_1_client_method_ex;
|
||||
break;
|
||||
#endif /* NO_TLS */
|
||||
|
||||
#endif /* NO_OLD_TLS */
|
||||
#endif /* !NO_TLS */
|
||||
#endif /* !NO_OLD_TLS */
|
||||
|
||||
#ifndef NO_TLS
|
||||
case 3:
|
||||
method = wolfTLSv1_2_client_method_ex;
|
||||
break;
|
||||
|
||||
#ifdef WOLFSSL_TLS13
|
||||
case 4:
|
||||
method = wolfTLSv1_3_client_method_ex;
|
||||
break;
|
||||
#endif
|
||||
#endif
|
||||
#endif /* NO_TLS */
|
||||
|
||||
#ifdef WOLFSSL_DTLS
|
||||
#ifndef NO_OLD_TLS
|
||||
|
||||
Reference in New Issue
Block a user