Force use of TLS 1.3 in OpenSSL demos

archigup · archigup · commit f4306deddeee · 2024-10-10T11:23:02.000-07:00
diff --git a/platform/posix/transport/src/openssl_posix.c b/platform/posix/transport/src/openssl_posix.c
@@ -631,6 +631,17 @@ OpensslStatus_t Openssl_Connect( NetworkContext_t * pNetworkContext,
         }
     }
 
+    /* Set minimum TLS version. */
+    if( returnStatus == OPENSSL_SUCCESS )
+    {
+        int ret = SSL_CTX_set_min_proto_version(pSslContext, TLS1_3_VERSION);
+        if(ret != 1)
+        {
+            LogError( ( "Failed to set minimum TLS version to 1.3." ) );
+            returnStatus = OPENSSL_API_ERROR;
+        }
+    }
+
     /* Setup credentials. */
     if( returnStatus == OPENSSL_SUCCESS )
     {

Original file line number	Diff line number	Diff line change
`@@ -631,6 +631,17 @@ OpensslStatus_t Openssl_Connect( NetworkContext_t * pNetworkContext,`
`631`	`631`	`}`
`632`	`632`	`}`
`633`	`633`
	`634`	`+ /* Set minimum TLS version. */`
	`635`	`+ if( returnStatus == OPENSSL_SUCCESS )`
	`636`	`+ {`
	`637`	`+ int ret = SSL_CTX_set_min_proto_version(pSslContext, TLS1_3_VERSION);`
	`638`	`+ if(ret != 1)`
	`639`	`+ {`
	`640`	`+ LogError( ( "Failed to set minimum TLS version to 1.3." ) );`
	`641`	`+ returnStatus = OPENSSL_API_ERROR;`
	`642`	`+ }`
	`643`	`+ }`
	`644`	`+`
`634`	`645`	`/* Setup credentials. */`
`635`	`646`	`if( returnStatus == OPENSSL_SUCCESS )`
`636`	`647`	`{`