From 2e2faa8c4802f2fcecea699ddda246929b2ca329 Mon Sep 17 00:00:00 2001 From: Richard Levitte Date: Mon, 19 Mar 2018 08:44:04 +0100 Subject: [PATCH] In TLSProxy::Proxy, specify TLSv1.3 as maximum allowable protocol Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/5663) --- util/perl/TLSProxy/Proxy.pm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/util/perl/TLSProxy/Proxy.pm b/util/perl/TLSProxy/Proxy.pm index db7b19c4a4..7b4ad052de 100644 --- a/util/perl/TLSProxy/Proxy.pm +++ b/util/perl/TLSProxy/Proxy.pm @@ -192,7 +192,7 @@ sub start $pid = fork(); if ($pid == 0) { my $execcmd = $self->execute - ." s_server -no_comp -rev -engine ossltest -accept " + ." s_server -max_protocol TLSv1.3 -no_comp -rev -engine ossltest -accept " .($self->server_port) ." -cert ".$self->cert." -cert2 ".$self->cert ." -naccept ".$self->serverconnects; @@ -233,7 +233,7 @@ sub clientstart $echostr = "test"; } my $execcmd = "echo ".$echostr." | ".$self->execute - ." s_client -engine ossltest -connect " + ." s_client -max_protocol TLSv1.3 -engine ossltest -connect " .($self->proxy_addr).":".($self->proxy_port); unless ($self->supports_IPv6) { $execcmd .= " -4"; -- 2.25.1