Use SSL_CTX_set_max_proto_version instead of SSL_CTX_set_max_version.
These functions are identical. BoringSSL added these APIs, then OpenSSL 1.1.0 added similar ones but with slightly longer names. We're standardizing on the OpenSSL names to avoid API skew. This is a cherry-pick of https://codereview.webrtc.org/2550423004. Test: mma Change-Id: Iffe4416bd300d71bbaa94c7c127ae89d6286cd7b
This commit is contained in:
@ -967,20 +967,20 @@ SSL_CTX* OpenSSLStreamAdapter::SetupSSLContext() {
|
||||
return NULL;
|
||||
|
||||
#ifdef OPENSSL_IS_BORINGSSL
|
||||
SSL_CTX_set_min_version(ctx, ssl_mode_ == SSL_MODE_DTLS ?
|
||||
SSL_CTX_set_min_proto_version(ctx, ssl_mode_ == SSL_MODE_DTLS ?
|
||||
DTLS1_VERSION : TLS1_VERSION);
|
||||
switch (ssl_max_version_) {
|
||||
case SSL_PROTOCOL_TLS_10:
|
||||
SSL_CTX_set_max_version(ctx, ssl_mode_ == SSL_MODE_DTLS ?
|
||||
SSL_CTX_set_max_proto_version(ctx, ssl_mode_ == SSL_MODE_DTLS ?
|
||||
DTLS1_VERSION : TLS1_VERSION);
|
||||
break;
|
||||
case SSL_PROTOCOL_TLS_11:
|
||||
SSL_CTX_set_max_version(ctx, ssl_mode_ == SSL_MODE_DTLS ?
|
||||
SSL_CTX_set_max_proto_version(ctx, ssl_mode_ == SSL_MODE_DTLS ?
|
||||
DTLS1_VERSION : TLS1_1_VERSION);
|
||||
break;
|
||||
case SSL_PROTOCOL_TLS_12:
|
||||
default:
|
||||
SSL_CTX_set_max_version(ctx, ssl_mode_ == SSL_MODE_DTLS ?
|
||||
SSL_CTX_set_max_proto_version(ctx, ssl_mode_ == SSL_MODE_DTLS ?
|
||||
DTLS1_2_VERSION : TLS1_2_VERSION);
|
||||
break;
|
||||
}
|
||||
|
Reference in New Issue
Block a user