Disable TLS v1.0 by default. Added new --enable-tlsv10 option to force enable (only works if --enable-oldtls is set, which is on by default).

This commit is contained in:
David Garske
2017-11-14 13:55:48 -08:00
parent fd4b3b40ac
commit d5cc3ca198
9 changed files with 95 additions and 60 deletions

View File

@@ -877,29 +877,29 @@ THREAD_RETURN CYASSL_THREAD server_test(void* args)
#endif
#ifndef NO_TLS
#ifdef WOLFSSL_ALLOW_TLSV10
case 1:
method = wolfTLSv1_server_method_ex;
break;
#endif
case 2:
method = wolfTLSv1_1_server_method_ex;
break;
#endif
#endif
#endif /* !NO_TLS */
#endif /* !NO_OLD_TLS */
#ifndef NO_TLS
case 3:
method = wolfTLSv1_2_server_method_ex;
break;
#endif
#ifdef WOLFSSL_TLS13
#ifdef WOLFSSL_TLS13
case 4:
method = wolfTLSv1_3_server_method_ex;
break;
#endif
#endif
#endif /* NO_TLS */
#ifdef CYASSL_DTLS
#ifndef NO_OLD_TLS