OpenSSL: Add option to disable use of TLSv1.0
authorJouni Malinen <j@w1.fi>
Wed, 8 Jul 2015 16:25:10 +0000 (19:25 +0300)
committerJouni Malinen <j@w1.fi>
Wed, 8 Jul 2015 16:27:57 +0000 (19:27 +0300)
commit5650d379a344482d47cb7b83fc314d5a6adbe5e1
tree325584bb9a676bede06395c9610607b30da633de
parent2456264fad1ecd400776afde0cf09d18448dbb4b
OpenSSL: Add option to disable use of TLSv1.0

The new phase1 config parameter value tls_disable_tlsv1_0=1 can now be
used to disable use of TLSv1.0 for a network configuration. This can be
used to force a newer TLS version to be used. For example,
phase1="tls_disable_tlsv1_0=1 tls_disable_tlsv1_1=1" would indicate that
only TLS v1.2 is accepted.

Signed-off-by: Jouni Malinen <j@w1.fi>
src/crypto/tls.h
src/crypto/tls_openssl.c
src/eap_peer/eap_tls_common.c
wpa_supplicant/wpa_supplicant.conf