CIPHERS.md: fix the example that uses only TLS 1.3

- Add --tls-max 1.3 to set the maximum version to TLS 1.3.

- Remove Schannel because it doesn't support TLS 1.3 ciphers since
  6238888.

Prior to this change the example set the minimum version to TLS 1.3 but
not the maximum version to TLS 1.3.

Ref: https://github.com/curl/curl/issues/21702

Closes https://github.com/curl/curl/pull/21719
This commit is contained in:
Jay Satiro 2026-05-21 14:00:09 -04:00
parent 7b9613fa9b
commit 2ba0a0e41e

View file

@ -188,12 +188,13 @@ mbedTLS and wolfSSL.
```sh
curl \
--tlsv1.3 \
--tls-max 1.3 \
--tls13-ciphers TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256 \
https://example.com/
```
Restrict to only TLS 1.3 with `aes128-gcm` and `chacha20` ciphers. Works with
OpenSSL, LibreSSL, mbedTLS, wolfSSL and Schannel.
OpenSSL, LibreSSL, mbedTLS and wolfSSL.
```sh
curl \