Correct handling of SSL_OP_NO_DTLSv1.
authorjsing <jsing@openbsd.org>
Sun, 27 Jun 2021 16:54:14 +0000 (16:54 +0000)
committerjsing <jsing@openbsd.org>
Sun, 27 Jun 2021 16:54:14 +0000 (16:54 +0000)
commit007a3d8dba306157e83a1eaf11e536eefab710ec
treef7a230c2e3ec909f9dd08699633ee3321c9dbc5b
parent59dbf68fc1687912554c95392f75c2795e1300ba
Correct handling of SSL_OP_NO_DTLSv1.

When converting to TLS flags, we need to also include SSL_OP_NO_TLSv1,
otherwise the TLS equivalent of SSL_OP_NO_DTLSv1 is TLSv1.0 only, which
does not work so well when we try to switch back to DTLS versions.
lib/libssl/ssl_versions.c