wireguard-openbsd/lib/libssl/ssl_versions.c, branch jd/queueboosts WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/lib/libssl/ssl_versions.c?h=jd%2Fqueueboosts 2020-05-31T18:03:32Z Replace ssl_max_server_version() with ssl_downgrade_max_version() 2020-05-31T18:03:32Z jsing jsing@openbsd.org 2020-05-31T18:03:32Z urn:sha1:b9f2fbd8d2d0a5734e930c4fa8ec8d6b7f7b51c4 Replace the only occurrence of ssl_max_server_version() with a call to ssl_downgrade_max_version() and remove ssl_max_server_version(). ok beck@ tb@ Correct downgrade sentinels when a version pinned method is in use. 2020-05-31T16:36:35Z jsing jsing@openbsd.org 2020-05-31T16:36:35Z urn:sha1:3231e218e51ca678e7830b1082f7a6f86157bec3 Previously only the enabled protocol versions were considered, however we also have to consider the method in use which may be version pinned. Found the hard way by danj@ with haproxy and force-tlsv12. ok beck@ inoguchi@ tb@ Include TLSv1.3 in version handling code. 2018-11-06T01:40:23Z jsing jsing@openbsd.org 2018-11-06T01:40:23Z urn:sha1:a639fc07d02b9086d59bfec8abeb6687048c6329 This is effectively a no-op, since most of the code clamps to the maximum version supported by the TLS method (which are still at TLSv1.2). ok beck@ bluhm@ tb@ Provide SSL{,_CTX}_set_{min,max}_proto_version() functions. 2017-05-06T20:37:24Z jsing jsing@openbsd.org 2017-05-06T20:37:24Z urn:sha1:43a30d3dc540bddabcfa9b4f1a82156efd0c91e4 Rides minor bump. ok beck@ Add missing $OpenBSD$ tags. 2017-05-06T16:18:36Z jsing jsing@openbsd.org 2017-05-06T16:18:36Z urn:sha1:597afc1f4d9e11667ba2812b88e34dffd141e895 Move relatively new version range code from ssl_lib.c into a separate 2017-01-26T06:01:44Z jsing jsing@openbsd.org 2017-01-26T06:01:44Z urn:sha1:2b939dc48d7587254ac1d3d0fa6dcbe481def472 ssl_versions.c file. ok beck@