diff options
| author | David Benjamin <davidben@google.com> | 2016-06-21 05:20:47 +0300 |
|---|---|---|
| committer | David Benjamin <davidben@google.com> | 2016-06-27 20:05:36 +0300 |
| commit | 10e664b91f1325b2caea8f7cf6230d343337be83 (patch) | |
| tree | 7a9ce21d25af10c95e58f18be886b305cb004e7d /include/openssl/ssl.h | |
| parent | 9acf0ca2698ca01c8545e1b69cabea67a99ed23d (diff) | |
Always set min_version / max_version.
Saves us some mess if they're never zero. This also fixes a bug in
ssl3_get_max_client_version where it didn't account for all versions being
disabled properly.
Change-Id: I4c95ff57cf8953cb4a528263b252379f252f3e01
Reviewed-on: https://boringssl-review.googlesource.com/8512
Reviewed-by: David Benjamin <davidben@google.com>
Diffstat (limited to 'include/openssl/ssl.h')
| -rw-r--r-- | include/openssl/ssl.h | 12 |
1 files changed, 4 insertions, 8 deletions
diff --git a/include/openssl/ssl.h b/include/openssl/ssl.h index d9cae0c1..0e3f3e21 100644 --- a/include/openssl/ssl.h +++ b/include/openssl/ssl.h @@ -3619,12 +3619,10 @@ struct ssl_ctx_st { /* lock is used to protect various operations on this object. */ CRYPTO_MUTEX lock; - /* max_version is the maximum acceptable protocol version. If zero, the - * maximum supported version, currently (D)TLS 1.2, is used. */ + /* max_version is the maximum acceptable wire protocol version. */ uint16_t max_version; - /* min_version is the minimum acceptable protocl version. If zero, the - * minimum supported version, currently SSL 3.0 and DTLS 1.0, is used */ + /* min_version is the minimum acceptable wire protocol version. */ uint16_t min_version; struct ssl_cipher_preference_list_st *cipher_list; @@ -3868,12 +3866,10 @@ struct ssl_st { /* version is the protocol version. */ int version; - /* max_version is the maximum acceptable protocol version. If zero, the - * maximum supported version, currently (D)TLS 1.2, is used. */ + /* max_version is the maximum acceptable wire protocol version. */ uint16_t max_version; - /* min_version is the minimum acceptable protocl version. If zero, the - * minimum supported version, currently SSL 3.0 and DTLS 1.0, is used */ + /* min_version is the minimum acceptable wire protocol version. */ uint16_t min_version; /* method is the method table corresponding to the current protocol (DTLS or |