From 4485007008f039648c4259a26484eabcd5b7cc9b Mon Sep 17 00:00:00 2001
From: Patrick McDermott <patrick.mcdermott@libiquity.com>
Date: Tue, 30 Jul 2019 00:14:50 -0400
Subject: s_client: Disable SSLv3, TLSv1.0, and TLSv1.1

And update tests/badssl.sh results.
---
diff --git a/src/s_client.c b/src/s_client.c
index 20ef929..683f08b 100644
--- a/src/s_client.c
+++ b/src/s_client.c
@@ -302,7 +302,7 @@ s_client(int argc, char **argv)
 
 	wolfSSL_Init();
 
-	method = wolfSSLv23_client_method();
+	method = wolfTLSv1_2_client_method();
 	if (method == NULL) {
 		fputs("Out of memory\n", stderr);
 		ret = EXIT_FAILURE;
diff --git a/tests/badssl.sh b/tests/badssl.sh
index 706dc97..40d33c2 100755
--- a/tests/badssl.sh
+++ b/tests/badssl.sh
@@ -101,6 +101,6 @@ do_test  'not'  'invalid-expected-sct'   443
 
 # Protocol
 
-do_test  '   '  'tls-v1-0'              1010
-do_test  '   '  'tls-v1-1'              1011
+do_test  'not'  'tls-v1-0'              1010
+do_test  'not'  'tls-v1-1'              1011
 do_test  '   '  'tls-v1-2'              1012
--
cgit v0.9.1