diff options
| author | Mikkel Krautz <mikkel@krautz.dk> | 2017-09-03 19:04:51 +0300 |
|---|---|---|
| committer | Mikkel Krautz <mikkel@krautz.dk> | 2017-09-03 19:05:24 +0300 |
| commit | 0f56484b9077207e43233a900a8f2fbb63d10c25 (patch) | |
| tree | 55e6c507252e2575a39af8315d7a2de3335b4553 | |
| parent | 9e9eeab918b07e65671092426b1051bd1bc8736a (diff) | |
MKConnection: use kCFStreamSocketSecurityLevelNegotiatedSSL for kCFStreamSSLLevel to allow for TLS > 1.0.
| -rw-r--r-- | src/MKConnection.m | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/MKConnection.m b/src/MKConnection.m index 2c546e6..aeca86f 100644 --- a/src/MKConnection.m +++ b/src/MKConnection.m @@ -502,7 +502,7 @@ static void MKConnectionUDPCallback(CFSocketRef sock, CFSocketCallBackType type, &kCFTypeDictionaryKeyCallBacks, &kCFTypeDictionaryValueCallBacks); if (sslDictionary) { - CFDictionaryAddValue(sslDictionary, kCFStreamSSLLevel, kCFStreamSocketSecurityLevelTLSv1); + CFDictionaryAddValue(sslDictionary, kCFStreamSSLLevel, kCFStreamSocketSecurityLevelNegotiatedSSL); CFDictionaryAddValue(sslDictionary, kCFStreamSSLValidatesCertificateChain, _ignoreSSLVerification ? kCFBooleanFalse : kCFBooleanTrue); if (_certificateChain) { |