From 4485007008f039648c4259a26484eabcd5b7cc9b Mon Sep 17 00:00:00 2001 From: Patrick McDermott Date: Tue, 30 Jul 2019 00:14:50 -0400 Subject: s_client: Disable SSLv3, TLSv1.0, and TLSv1.1 And update tests/badssl.sh results. --- diff --git a/src/s_client.c b/src/s_client.c index 20ef929..683f08b 100644 --- a/src/s_client.c +++ b/src/s_client.c @@ -302,7 +302,7 @@ s_client(int argc, char **argv) wolfSSL_Init(); - method = wolfSSLv23_client_method(); + method = wolfTLSv1_2_client_method(); if (method == NULL) { fputs("Out of memory\n", stderr); ret = EXIT_FAILURE; diff --git a/tests/badssl.sh b/tests/badssl.sh index 706dc97..40d33c2 100755 --- a/tests/badssl.sh +++ b/tests/badssl.sh @@ -101,6 +101,6 @@ do_test 'not' 'invalid-expected-sct' 443 # Protocol -do_test ' ' 'tls-v1-0' 1010 -do_test ' ' 'tls-v1-1' 1011 +do_test 'not' 'tls-v1-0' 1010 +do_test 'not' 'tls-v1-1' 1011 do_test ' ' 'tls-v1-2' 1012 -- cgit v0.9.1