romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-07-07 18:17:17 +03:00
Code Issues Projects Releases Packages Wiki Activity

mbedtls: TLS 1.3 is max when mbedtls has 1.3 support

Browse source 
Co-authored-by: Viktor Szakats
Reported-by: kkalganov on github
Fixes #17048
Closes #17137
This commit is contained in:
Daniel Stenberg 2025-04-22 16:05:42 +02:00
parent 79b4e56b3f
commit 437c72fbba
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
1 changed files with 17 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

20
lib/vtls/mbedtls.c
View file

@ -273,7 +273,13 @@ mbed_set_ssl_version_min_max(struct Curl_easy *data,
#else
/* mbedTLS 3.2.0 (2022) introduced new methods for setting TLS version */
mbedtls_ssl_protocol_version ver_min = MBEDTLS_SSL_VERSION_TLS1_2;
mbedtls_ssl_protocol_version ver_max = MBEDTLS_SSL_VERSION_TLS1_2;
mbedtls_ssl_protocol_version ver_max =
#ifdef HAS_TLS13_SUPPORT
MBEDTLS_SSL_VERSION_TLS1_3
#else
MBEDTLS_SSL_VERSION_TLS1_2
#endif
;
#endif
switch(conn_config->version) {
@ -292,7 +298,11 @@ mbed_set_ssl_version_min_max(struct Curl_easy *data,
case CURL_SSLVERSION_TLSv1_1:
#endif
case CURL_SSLVERSION_TLSv1_2:
/* ver_min = MBEDTLS_SSL_VERSION_TLS1_2; */
#if MBEDTLS_VERSION_NUMBER < 0x03020000
ver_min = MBEDTLS_SSL_MINOR_VERSION_3; /* TLS 1.2 */
#else
ver_min = MBEDTLS_SSL_VERSION_TLS1_2;
#endif
break;
case CURL_SSLVERSION_TLSv1_3:
#ifdef HAS_TLS13_SUPPORT
@ -314,7 +324,11 @@ mbed_set_ssl_version_min_max(struct Curl_easy *data,
break;
#endif
case CURL_SSLVERSION_MAX_TLSv1_2:
/* ver_max = MBEDTLS_SSL_VERSION_TLS1_2; */
#if MBEDTLS_VERSION_NUMBER < 0x03020000
ver_max = MBEDTLS_SSL_MINOR_VERSION_3; /* TLS 1.2 */
#else
ver_max = MBEDTLS_SSL_VERSION_TLS1_2;
#endif
break;
#if MBEDTLS_VERSION_NUMBER < 0x03000000
case CURL_SSLVERSION_MAX_TLSv1_1: