commit 448ea506bf075c22680fc2d45477f78ceb11d8cf
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Mon Jan 12 11:40:14 2015 +0100
committer Manuel Pégourié-Gonnard <mpg@elzevir.fr> Mon Jan 12 12:32:04 2015 +0100
tree f8f0795884b01d7594e55d5e475f50231326944f
parent d68b65199f1b747b53b9cb9c4ace1f48cf12a94e

Set min version to TLS 1.0 in programs

programs/ssl/ssl_client1.c

diff --git a/programs/ssl/ssl_client1.c b/programs/ssl/ssl_client1.c
index 1b369a6..8f85b10 100644
--- a/programs/ssl/ssl_client1.c
+++ b/programs/ssl/ssl_client1.c
@@ -168,6 +168,9 @@
     ssl_set_authmode( &ssl, SSL_VERIFY_OPTIONAL );
     ssl_set_ca_chain( &ssl, &cacert, NULL, "PolarSSL Server 1" );
 
+    /* SSLv3 is deprecated, set minimum to TLS 1.0 */
+    ssl_set_min_version( &ssl, SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_1 );
+
     ssl_set_rng( &ssl, ctr_drbg_random, &ctr_drbg );
     ssl_set_dbg( &ssl, my_debug, stdout );
     ssl_set_bio( &ssl, net_recv, &server_fd,