From: Felix Fietkau <nbd@openwrt.org>
Date: Sun, 21 Feb 2016 08:10:46 +0000 (+0100)
Subject: openssl: force TLS v1.2 instead of v1
X-Git-Url: http://git.openwrt.org/?p=project%2Fustream-ssl.git;a=commitdiff_plain;h=053c4ccca9372d7550759e540b7458ca57db1538

openssl: force TLS v1.2 instead of v1

Fixes some connection issues

Signed-off-by: Felix Fietkau <nbd@openwrt.org>
---

diff --git a/ustream-openssl.c b/ustream-openssl.c
index 0d4a8ff..4a3f0a2 100644
--- a/ustream-openssl.c
+++ b/ustream-openssl.c
@@ -42,9 +42,9 @@ __ustream_ssl_context_new(bool server)
 		m = SSLv23_client_method();
 #else
 	if (server)
-		m = TLSv1_server_method();
+		m = TLSv1_2_server_method();
 	else
-		m = TLSv1_client_method();
+		m = TLSv1_2_client_method();
 #endif
 
 	c = SSL_CTX_new((void *) m);